GHSA-7gqc-q9mc-6348, CVE-2023-30532
maven/org.jenkinsci.plugins.spoonscript/spoonscript
Missing Authorization
A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.
All versions up to 1.3
Unfortunately, there is no solution available yet.
2024-02-09
source |