Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-50764
HistoryDec 13, 2023 - 6:15 p.m.

Design/Logic Flaw

2023-12-1318:15:00
PRIOn knowledge base
www.prio-n.com
3
jenkins
scriptler
plugin
file deletion
security issue

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system.

CPENameOperatorVersion
scriptlereq<= 342.v6a-89fd40f466

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%