Lucene search

K
osvGoogleOSV:GHSA-CH63-6CMG-GWG2
HistoryMar 16, 2022 - 12:00 a.m.

Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin

2022-03-1600:00:44
Google
osv.dev
11
jenkins
extended choice parameter plugin
vulnerability
json
property file
read
jenkins controller

EPSS

0.001

Percentile

49.1%

Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller.

EPSS

0.001

Percentile

49.1%