Security Advisory
CVE-2023-35147
6.5
MEDIUM
Vulnerability Description
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.
Published Date
June 14, 2023
Official Source
NIST NVD Advisory