4.3
Medium
CVE-2023-30522 A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to…
Description
A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to trigger builds of jobs specified in a 'jobname' request parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Fogbugz Plugin 2.2 | earliest → 2.2.17 | No fix stated |