Config Rotator

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-15	CVE-2022-45388	Unspecified vulnerability in Jenkins Config Rotator 2.0.1 Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated attackers to read arbitrary files with '.xml' extension on the Jenkins controller file system. network low complexity jenkins	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.