Lucene search
GitHub Advisory DatabaseGHSA-478X-M3MX-7J3FHistoryMar 06, 2024 - 6:30 p.m.
Jenkins HTML Publisher Plugin Path traversal vulnerability
2024-03-0618:30:38
GitHub Advisory Database
github.com
7
jenkins
html publisher plugin
path traversal
vulnerability
attackers
file system
paths
Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.
Affected configurations
Node
org.jenkinsci.plugins\Matchhtmlpublisher
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jenkins-ci.plugins:htmlpublisher | lt | 1.32.1 |
Related
nvd
nvd
CVE-2024-28151
2024-03-06 17:15:10
veracode
veracode
Path Traversal
2024-03-12 10:06:02
redhatcve
redhatcve
CVE-2024-28151
2024-03-06 18:46:43
cvelist
cvelist
CVE-2024-28151
2024-03-06 17:01:55
osv
osv
Jenkins HTML Publisher Plugin Path traversal vulnerability
2024-03-06 18:30:38
prion
prion
Design/Logic Flaw
2024-03-06 17:15:00
cve
cve
CVE-2024-28151
2024-03-06 17:15:10
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-03-06)
2024-03-07 00:00:00