Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54933
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Pipeline Phoenix AutoTest Plugin 文件上传漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

27.0%

Jenkins Pipeline is a set of plug-ins that support the implementation and integration of continuous delivery pipelines into Jenkins.The Jenkins Pipeline Phoenix AutoTest Plugin 1.3 and earlier versions are vulnerable to a path traversal vulnerability that could be exploited by an attacker with project/configuration privileges to FTP arbitrary files from Jenkins controller to an FTP server specified by the attacker.

0.001 Low

EPSS

Percentile

27.0%

Related for CNVD-2022-54933