Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54949
HistoryMar 22, 2022 - 12:00 a.m.

Jenkins Extended Choice Parameter Plugin任意文件读取漏洞

2022-03-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.001 Low

EPSS

Percentile

39.9%

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins Extended Choice Parameter Plugin has an arbitrary file reading vulnerability that can be exploited by an attacker with project/configuration privileges to read values from values from arbitrary JSON and Java property files on the Jenkins controller.

0.001 Low

EPSS

Percentile

39.9%