CVE-2023-35147
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Jenkins AWS CodeCommit Trigger Plugin version 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to access the contents of arbitrary files on the Jenkins controller file system.
Risk Assessment
Attackers may gain access to sensitive data stored on the Jenkins server, potentially leading to information disclosure or system compromise.
Recommendation
It is recommended to update the plugin to the latest version to block unauthorized access to files on the Jenkins controller file system.
Original NVD description (English source)
Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.