Lucene search
+L

134 matches found

Github Security Blog
Github Security Blog
•added 2026/06/24 3:31 p.m.•7 views

Jenkins External Workspace Manager Plugin has a path traversal vulnerability

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject .. path segments when validating the custom workspace path provided to the exwsAllocate Pipeline step, allowing the resulting workspace path to escape the configured disk mount point. This allows attackers with...

8.8CVSS6.5AI score0.00835EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/06/24 1:20 p.m.•45 views

CVE-2026-57296

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

0.00835EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/24 1:20 p.m.•13 views

CVE-2026-57296

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

8.8CVSS6.3AI score0.00835EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/24 1:20 p.m.•43 views

CVE-2026-57296

The Jenkins External Workspace Manager Plugin (version 1.3.2 and earlier) contains a path traversal vulnerability. The plugin fails to reject .. path segments when validating the custom workspace path provided to the exwsAllocate Pipeline step, allowing the path to escape the configured disk moun...

8.8CVSS6.5AI score0.00835EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/24 1:20 p.m.•25 views

EUVD-2026-38777

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

8.8CVSS6.3AI score0.00835EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/24 1:20 p.m.•10 views

CVE-2026-57296

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

6.5AI score0.00835EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/24 12:00 a.m.•28 views

PT-2026-51806

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

6.3AI score0.00835EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/24 12:00 a.m.•2 views

CVE-2026-57296: Improper Limitation of a Pathname to a Restricted Directory

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom workspace path provided to the exwsAllocate Pipeline step, allowing attackers with Item/Configure permission to read arbitrary files on the Jenkins controller file system, which can...

8.8CVSS6.3AI score0.00835EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/06/24 12:00 a.m.•23 views

Path traversal vulnerability in external-workspace-manager

external-workspace-manager 1.3.2 and earlier does not reject .. path segments when validating the custom workspace path provided to the exwsAllocate Pipeline step, allowing the resulting workspace path to escape the configured disk mount point. This allows attackers with Item/Configure permission...

8.8CVSS6.5AI score0.00835EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-0969

Malware in sbrugna...

6.5CVSS6.3AI score0.01442EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2007-5485

Malware in sbrugna...

6.5CVSS6.2AI score0.02032EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2009-1019

Malware in sbrugna...

5.5CVSS6.2AI score0.02219EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-6457

Malware in sbrugna...

6.5CVSS5.4AI score0.01896EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2009-0983

Malware in sbrugna...

5.4CVSS6.3AI score0.02118EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2015-4942

Malware in sbrugna...

6.5CVSS7.5AI score0.01652EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2009-0973

Malware in sbrugna...

5.5CVSS6.3AI score0.02219EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2009-1959

Malware in sbrugna...

5.5CVSS6.3AI score0.02219EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2009-0972

Malware in sbrugna...

5.5CVSS6.1AI score0.02497EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/02/15 5:16 a.m.•13 views

SUSE CVE-2015-4925

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

6.5CVSS7AI score0.01652EPSS
SaveExploits0References3
zdt
zdt
•added 2020/03/19 12:00 a.m.•313 views

Ivanti Workspace Manager Security Bypass Vulnerability

Ivanti Workspace Manager Security Bypass Vulnerability Rem Remarks CVE-2019-10885 - 0day Rem An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated Rem users with low privileges in a Workspace Control managed session can bypass Workspace Control Rem security...

7.8CVSS0.3AI score0.01043EPSS
SaveExploits2
Rows per page
Query Builder