Lucene search
PRIOn knowledge basePRION:CVE-2023-41932HistorySep 06, 2023 - 1:15 p.m.
Design/Logic Flaw
2023-09-0613:15:00
PRIOn knowledge base
www.prio-n.com
6
jenkins
configuration
history plugin
directory deletion
attackers
file system
0.0005 Low
EPSS
Percentile
18.3%
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict ‘timestamp’ query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called ‘history.xml’.
| CPE | Name | Operator | Version |
|---|---|---|---|
| job_configuration_history | eq | <= 1227.v7a-79fc4dc1f |
Related
alpinelinux
alpinelinux
CVE-2023-41932
2023-09-06 13:15:09
cve
cve
CVE-2023-41932
2023-09-06 13:15:09
github
github
osv
osv
nvd
nvd
CVE-2023-41932
2023-09-06 13:15:09
cvelist
cvelist
CVE-2023-41932
2023-09-06 12:08:53
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2023-09-06)
2023-09-07 00:00:00