Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-41932
HistorySep 06, 2023 - 1:15 p.m.

CVE-2023-41932

2023-09-0613:15:09
CWE-611
[email protected]
web.nvd.nist.gov
77
cve-2023-41932
jenkins
job configuration history plugin
security
vulnerability
nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict ‘timestamp’ query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called ‘history.xml’.

CPENameOperatorVersion
jenkins:job_configuration_historyjenkins job configuration historyle1227.v7a_79fc4dc01f
jenkins:job_configuration_historyjenkins job configuration historyeq2.28
jenkins:job_configuration_historyjenkins job configuration historyeq2.31-rc1092.de9e11acbcf3
jenkins:job_configuration_historyjenkins job configuration historyeq2.29
jenkins:job_configuration_historyjenkins job configuration historyeq2.30
jenkins:job_configuration_historyjenkins job configuration historyeq1156.v536a_97b_8d649
jenkins:job_configuration_historyjenkins job configuration historyeq2.19
jenkins:job_configuration_historyjenkins job configuration historyeq2.23
jenkins:job_configuration_historyjenkins job configuration historyeq2.22
jenkins:job_configuration_historyjenkins job configuration historyeq2.24
Rows per page:
1-10 of 671

Related

alpinelinux 1
osv 1
github 1
prion 1
cvelist 1
nessus 1
alpinelinux
alpinelinux
CVE-2023-41932
2023-09-06 13:15:09
osv
osv
Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
2023-09-06 15:30:26
github
github
Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
2023-09-06 15:30:26
prion
prion
Design/Logic Flaw
2023-09-06 13:15:00
cvelist
cvelist
CVE-2023-41932
2023-09-06 12:08:53
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON
Related for CVE-2023-41932
alpinelinux1osv1github1prion1cvelist1nessus1