~/products/jenkins_project/jenkins_file_parameter_plugin

pipeline liveDigest Docs

Jenkins Project Jenkins File Parameter Plugin vulnerabilities

1 known vulnerability affecting jenkins_project/jenkins_file_parameter_plugin.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2023-32986P2HIGHCVSS 8.8≤ 285.v757c5b_67a_c252023-05-16

CVE-2023-32986 [HIGH] CWE-732 CVE-2023-32986: Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and result Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.

Jenkins Project Jenkins File Parameter Plugin vulnerabilities | cvebase