Lucene search
K

10 matches found

Github Security Blog
Github Security Blog
added 2022/07/28 12:0 a.m.18 views

Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of...

4.3CVSS4.8AI score0.00074EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/07/28 12:0 a.m.24 views

GHSA-JJ8J-6JQ7-GMVH Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins controller file system

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of...

4.3CVSS4.7AI score0.00074EPSS
Exploits0References3
NVD
NVD
added 2022/07/27 3:15 p.m.10 views

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

4.3CVSS0.00074EPSS
Exploits0References2
OSV
OSV
added 2022/07/27 3:15 p.m.15 views

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

4.3CVSS4.5AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/07/27 3:15 p.m.3 views

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

4.3CVSS5.8AI score0.00074EPSS
Exploits0References3
Prion
Prion
added 2022/07/27 3:15 p.m.18 views

Design/Logic Flaw

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

4CVSS4.4AI score0.00074EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/27 2:27 p.m.17 views

CVE-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

5.2AI score0.00074EPSS
Exploits0References2
CVE
CVE
added 2022/07/27 2:27 p.m.80 views

CVE-2022-36914

CVE-2022-36914 affects Jenkins Files Found Trigger Plugin 1.5 and earlier. The root cause is a missing permission check in a form-validation method, enabling attackers with Overall/Read to determine the existence of an attacker-specified file path on the Jenkins controller filesystem. The public ...

4.3CVSS4.4AI score0.00074EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/07/27 12:0 a.m.2 views

PT-2022-4014 · Jenkins · Jenkins Files Found Trigger Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Files Found Trigger Plugin versions 1.5 and earlier Description: The issue is related to insufficient authorization procedures in the plugin. This allows a remote attacker to gain unauthorized access to protected information...

4.3CVSS4.4AI score0.00074EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/07/27 12:0 a.m.1 views

Jenkins Files Found Trigger Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.00074EPSS
Exploits0References5
Rows per page
Query Builder