CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

CVE-2020-2278

Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...

Code injection

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

Code injection

Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...

CVE-2020-2278

Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...

CVE-2020-2278

CVE-2020-2278 affects Jenkins Storable Configs Plugin before or equal to 1.0. The issue is an insufficient validation of user-supplied file names: an attacker with Job/Configure permission can replace any other .xml file on the Jenkins controller with the contents of a job config.xml, enabling ar...

CVE-2020-2277

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller...

CVE-2020-2277

Summary: CVE-2020-2277 affects Jenkins Storable Configs Plugin 1.0 and earlier. It allows users with Job/Read permission to read arbitrary files on the Jenkins controller. The issue is documented across multiple sources, with remediation guidance indicating to upgrade to a version later than 1.0....

PT-2020-15507 · Jenkins · Jenkins Storable Configs Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Storable Configs Plugin versions 1.0 and earlier Description: The issue allows attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content, due to the lack of...

PT-2020-15506 · Jenkins · Jenkins Storable Configs Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Storable Configs Plugin version 1.0 and earlier Description: The issue allows users with Job/Read permission to read arbitrary files on the Jenkins controller. Recommendations: For Jenkins Storable Configs Plugin version 1.0 and...

SUSE SLES12 Security Update : perl-PlRPC (SUSE-SU-2020:2238-1)

This update for perl-PlRPC fixes the following issues : Security notice: bsc858243, CVE-2013-7284 - Document security vulnerability on Storable and reply attack Add perl-PlRPC-CVE-2013-7284.patch Note that Tenable Network Security has extracted the preceding description block directly from the SU...

CVE-2016-10845

cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/checksystemstorable SEC-78...

Fedora 28 : perl-Dancer2 (2018-ded377a782)

Dancer2 0.206000 addresses several potential security issues. There is a potential RCE with regards to Storable. Dancer2 adds session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE. Parsing...

Updated perl-Dancer2 packages fix security vulnerabilities

Dancer2 0.206000 addresses several potential security issues. There is a potential RCE with regards to Storable. Dancer2 adds session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE. Parsing...

Fedora 27 : perl-Dancer2 (2018-59eb033684)

Dancer2 0.206000 addresses several potential security issues. There is a potential RCE with regards to Storable. Dancer2 adds session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE. Parsing...

SixApart MovableType Storable Perl Code Execution (CVE-2015-1592)

A vulnerability was discovered in SixApart MovableType. This is due to a vulnerability of storable perl module. A remote attacker can exploit this weakness by execute arbitrary code via a crafted request...

CVE-2013-2184

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the commentstate parameter...

UBUNTU-CVE-2013-2184

Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the commentstate parameter...

CVE-2013-2184

CVE-2013-2184 affects Movable Type before 5.2.6. The vulnerability arises from unsafe use of Storable::thaw when handling comments to blog posts, enabling remote code execution via the comment_state parameter. Multiple connected sources confirm a remote arbitrary-code execution risk and reference...