CVE-2023-27902

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.

Score

CVSS 3.1 4.3 Medium

Status

Modified - jenkinsci-cert@googlegroups.com

Published

2023-03-10

Last modified

2025-02-28

Affected products

• Jenkins (Jenkins)
• Jenkins (Jenkins Project)

References

• https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-1807