cve/2024/CVE-2024-43045.md
2024-08-08 18:49:29 +00:00

652 B

CVE-2024-43045

Description

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to access other users' "My Views".

POC

Reference

No PoCs from references.

Github