CVE-2023-40338

Summary

CVE-2023-40338 is a vulnerability affecting the Jenkins Folders Plugin version 6.846.v23698686f0f6 and earlier. When trying to access the Scan Organization Folder Log where no logs are available, an error message is displayed, unintentionally revealing an absolute path to a Jenkins controller log file. This disclosure could potentially expose information about the file system of the Jenkins controller. Users are urged to upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.