Security Advisory

CVE-2023-30522

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-12 17:05:12
Last updated 2025-02-07 17:02:33
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter.