Executive brief
Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
Affected products
- Maven org.jenkins-ci.plugins:electricflow
Junglewise Threat Intelligence
CVE-2023-46655: Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
CVE-2023-46655 · Severity: low · CVSS 3.1 · Published 2023-10-25
Technologies: org.jenkins-ci.plugins:electricflow (Maven). Vendors: Maven.
Related threats
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
- Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
- Jenkins ElectricFlow Plugin missing permission check
- Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
- Jenkins ElectricFlow Plugin Missing permission checks