CVE-2023-30529 Information

Description

Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint allowing attackers to reindex the database.

Reference

https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013

Share on: