CVE-2022-27203

Publication date

2022-03-15 16:45:49

Family

jenkins

State

PUBLISHED

Description

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller.