CVE-2023-32979 (published 2023-05-16T16:00:00.471Z)
Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system.
Affected products: Vendor: Jenkins Project
Product: Jenkins Email Extension Plugin
Versions: 2.96.1, 2.89.0.2