CVE-2025-67643

Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...

CVE-2025-67643

Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b9517b6b202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspa...

CVE-2025-67643

The Jenkins Redpen - Pipeline Reporter for Jira Plugin (version 1.054.v7b_9517b_6b_202 and earlier) is vulnerable to a path traversal (CWE-22) flaw. The root cause is insufficient path validation of the workspace directory during the artifact upload process to Jira. An attacker with Item/Configur...