Lucene search
GoogleOSV:CVE-2020-2278HistorySep 16, 2020 - 2:15 p.m.
CVE-2020-2278
2020-09-1614:15:14
Google
osv.dev
2
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other ‘.xml’ file on the Jenkins controller with a job config.xml file’s content.
Related
cvelist
cvelist
CVE-2020-2278
2020-09-16 13:20:50
prion
prion
Code injection
2020-09-16 14:15:00
nvd
nvd
CVE-2020-2278
2020-09-16 14:15:14
cve
cve
CVE-2020-2278
2020-09-16 14:15:14
github
github
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
2022-05-24 17:28:27
osv
osv
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
2022-05-24 17:28:27