CVE-2018-1000175

2018-05-0815:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

26.8%

JSON

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.

CPENameOperatorVersion
htmlpublisher-plugineqhtmlpublisher-1.12
htmlpublisher-plugineqhtmlpublisher-0.7
htmlpublisher-plugineqhtmlpublisher-1.1
htmlpublisher-plugineqhtmlpublisher-1.5
htmlpublisher-plugineqhtmlpublisher-1.9
htmlpublisher-plugineqhtmlpublisher-1.7
htmlpublisher-plugineqhtmlpublisher-1.6
htmlpublisher-plugineqhtmlpublisher-1.0
htmlpublisher-plugineqhtmlpublisher-1.3
htmlpublisher-plugineqhtmlpublisher-0.8

Name	Operator	Version
htmlpublisher-plugin	eq	htmlpublisher-1.12
htmlpublisher-plugin	eq	htmlpublisher-0.7
htmlpublisher-plugin	eq	htmlpublisher-1.1
htmlpublisher-plugin	eq	htmlpublisher-1.5
htmlpublisher-plugin	eq	htmlpublisher-1.9
htmlpublisher-plugin	eq	htmlpublisher-1.7
htmlpublisher-plugin	eq	htmlpublisher-1.6
htmlpublisher-plugin	eq	htmlpublisher-1.0
htmlpublisher-plugin	eq	htmlpublisher-1.3
htmlpublisher-plugin	eq	htmlpublisher-0.8

Rows per page:

1-10 of 201

References

jenkins.io/security/advisory/2018-04-16/

0.001 Low

EPSS

Percentile

26.8%

JSON

Related for OSV:CVE-2018-1000175