Lucene search
GoogleOSV:GHSA-QV6Q-4JWX-7J5CHistoryMay 24, 2022 - 5:28 p.m.
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
2022-05-2417:28:27
Google
osv.dev
7
0.001 Low
EPSS
Percentile
27.0%
Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other ‘.xml’ file on the Jenkins controller with a job config.xml file’s content.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.jvnet.hudson.plugins:storable-configs-plugin | eq | 1.0 |
Related
cvelist
cvelist
CVE-2020-2278
2020-09-16 13:20:50
prion
prion
Code injection
2020-09-16 14:15:00
osv
osv
CVE-2020-2278
2020-09-16 14:15:14
nvd
nvd
CVE-2020-2278
2020-09-16 14:15:14
cve
cve
CVE-2020-2278
2020-09-16 14:15:14
github
github
Arbitrary file write vulnerability in Jenkins Storable Configs Plugin
2022-05-24 17:28:27