Lucene search
PRIOn knowledge basePRION:CVE-2023-24455HistoryJan 26, 2023 - 9:18 p.m.
Design/Logic Flaw
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
3
jenkins
visualexpert
plugin
directory traversal
form validation
jenkins controller
security flaw
Jenkins visualexpert Plugin 1.3 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Item/Configure permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| visual_expert | eq | 1.0 | |
| visual_expert | eq | 1.3 |
Related
nvd
nvd
CVE-2023-24455
2023-01-26 21:18:18
cve
cve
CVE-2023-24455
2023-01-26 21:18:18
cvelist
cvelist
CVE-2023-24455
2023-01-24 00:00:00
osv
osv
Path Traversal in Jenkins visualexpert Plugin
2023-01-26 21:30:18
github
github
Path Traversal in Jenkins visualexpert Plugin
2023-01-26 21:30:18
nessus
nessus