[org.jenkins-ci.plugins:delete-log-plugin] Missing permission check in Jenkins Delete log Plugin

A missing permission check in Jenkins Delete log Plugin 1.0 and earlier allows attackers with Item/Read permission to delete build logs. As of publication of this advisory, there is no fix.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-45394
• https://www.jenkins.io/security/advisory/2022-11-15/#SECURITY-2920
• https://github.com/advisories/GHSA-j874-47xx-9xfg