CVE-2023-32979

Name of the Vulnerable Software and Affected Versions Jenkins Email Extension Plugin versions 2.96 and earlier

Description The issue allows attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system. This is due to a lack of permission check in a method implementing form validation.

Recommendations For Jenkins Email Extension Plugin versions 2.96 and earlier, update to version 2.96.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the email-templates/ directory to minimize the risk of exploitation.