Jenkins Plugin PWauth Security Realm 路径遍历漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

CVE-2023-24449: Improper Limitation of a Pathname to a Restricted Directory

Jenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system...

PT-2023-19609

Name of the Vulnerable Software and Affected Versions Jenkins PWauth Security Realm Plugin versions 0.4 and earlier Description The issue allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system, due to a lac...