Filtered by vendor Jenkins Subscriptions
Filtered by product Pwauth Security Realm Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-24449 1 Jenkins 1 Pwauth Security Realm 2024-08-02 4.3 Medium
Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.