Fix SECURITY-2404 / CVE-2022-36915

jenkinsci · Feb 9, 2023 · 33162c6 · 33162c6
1 parent 930cd58
commit 33162c6
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/main/java/org/jenkinsci/plugins/androidsigning/SignApksBuilder.java b/src/main/java/org/jenkinsci/plugins/androidsigning/SignApksBuilder.java
@@ -438,6 +438,7 @@ public FormValidation doCheckApksToSign(@AncestorInPath AbstractProject project,
             if (project == null) {
                 return FormValidation.warning(Messages.validation_noProject());
             }
+            project.checkPermission(Item.WORKSPACE);
             FilePath someWorkspace = project.getSomeWorkspace();
             if (someWorkspace == null) {
                 return FormValidation.warning(Messages.validation_noWorkspace());