Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-52549

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.

Published

2024-11-13T21:15:29.233

Last Modified

2025-10-10T15:29:40.633

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application jenkins script_security < 1362.1364.v4cf2dc5d8776 Yes
Application jenkins script_security < 1367.vdf2fc45f229c Yes
Application jenkins script_security 1365.v4778ca_84b_de5 Yes
References