CVE-2023-35149 (published 2023-06-14T12:53:11.041Z)
A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins.
Affected products: Vendor: Jenkins Project
Product: Jenkins Digital.ai App Management Publisher Plugin
Versions: 0