Vulnerabilities (CVE)

Filtered by vendor Jenkins Subscribe
Filtered by product Aws Codecommit Trigger
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-35147 1 Jenkins 1 Aws Codecommit Trigger 2024-12-31 N/A 6.5 MEDIUM
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.