CVE-2023-24455: Jenkins Visual Expert

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Affected products

• Jenkins Visual Expert: version 1.0 only; version 1.3 only

Published 2023-01-26. Last modified 2026-06-17.