Vulnerability Details CVE-2023-50765
A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read permission to read the contents of a Groovy script by knowing its ID.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.1%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2023-50765
-
cpe:2.3:a:jenkins:scriptler:-
-
cpe:2.3:a:jenkins:scriptler:3.1
-
cpe:2.3:a:jenkins:scriptler:3.2
-
cpe:2.3:a:jenkins:scriptler:3.3
-
cpe:2.3:a:jenkins:scriptler:3.4
-
cpe:2.3:a:jenkins:scriptler:3.5
-
cpe:2.3:a:jenkins:scriptler:342.v6a_89fd40f466