Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/10/25 12:00 a.m.•18 views

Arbitrary file read vulnerability in electricflow

electricflow temporarily copies files from an agent workspace to the controller in preparation for publishing them in the 'CloudBees CD - Publish Artifact' post-build step. electricflow 1.1.32 and earlier follows symbolic links to locations outside of the temporary directory on the controller whe...

6.5CVSS6.6AI score0.01159EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder