Lucene search

K
osvGoogleOSV:BIT-JENKINS-2021-21690
HistoryMar 06, 2024 - 11:00 a.m.

BIT-jenkins-2021-21690

2024-03-0611:00:16
Google
osv.dev
7
agent processes
file path filtering
jenkins 2.318
lts 2.303.2

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

CPENameOperatorVersion
jenkinslt2.319.0
jenkinslt2.303.3

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.5%