CVE-2022-28157

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...

CVE-2022-28157

CVE-2022-28157 affects Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier. The vulnerability allows an attacker with Item/Configure permission to cause the Jenkins controller to upload arbitrary files to an attacker‑supplied FTP server, via FTP. Multiple connected sources corroborate that ...

CVE-2022-28156

CVE-2022-28156 affects Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier. The vulnerability allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace. The connected sources also describe a related path-traver...

CVE-2022-28156

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace...

CVE-2022-28155

CVE-2022-28155 concerns the Jenkins Pipeline: Phoenix AutoTest Plugin (versions 1.3 and earlier). The vulnerability arises because the plugin’s XML parser is not configured to prevent XML external entity (XXE) attacks. Attackers able to supply crafted XML inputs to build steps such as readXml/wri...

PT-2022-18854 · Jenkins · Jenkins Pipeline: Phoenix Autotest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Phoenix AutoTest Plugin versions 1.3 and earlier Description: The issue is related to the Phoenix AutoTest Plugin not configuring its XML parser to prevent XML external entity XXE attacks. This allows attackers who can contr...

PT-2022-18855 · Jenkins · Jenkins Pipeline: Phoenix Autotest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Phoenix AutoTest Plugin versions 1.3 and earlier Description: The issue allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace...

PT-2022-18856 · Jenkins · Jenkins Pipeline: Phoenix Autotest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Phoenix AutoTest Plugin versions 1.3 and earlier Description: The issue allows attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller via FTP to an attacker-specified FTP server...