Threats tagged 'ghsa-g2pq-9jr7-w6gv'

A file system information disclosure vulnerability exists in Jenkins Git client Plugin versions 6.3.2 and earlier. The flaw allows attackers with Overall/Read permission to infer the existence of files on the Jenkins controller by observing differences in Git URL field validation responses when using the amazon-s3 protocol with JGit. This vulnerability was fixed in version 6.3.3.