8 matches found
EUVD-2022-3404
Malicious code in bioql PyPI...
SUSE CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
com.amcbridge:build-configurator (>=1.0.5.0 <=1.0.6.1), com.piketec.jenkins.plugins:piketec-tpt (>=7.0 <=7.8) +3 more potentially affected by CVE-2018-1000148 via org.jenkins-ci.plugins:copy-to-slave (>=1.4 <=1.4.4)
org.jenkins-ci.plugins:copy-to-slave MAVEN version =1.4, =1.0.5.0, =7.0, =1.1, =1.140, =1.144 Source cves: CVE-2018-1000148 Source advisory: OSV:GHSA-9JRH-HCH8-RR5C...
GHSA-9JRH-HCH8-RR5C Jenkins Copy To Slave Plugin allows access to arbitrary files on the Jenkins controller file system
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
CVE-2018-1000148
The CVE-2018-1000148 entry concerns the Jenkins Copy To Slave Plugin, affected version 1.4.4 and earlier. The vulnerability is in CopyToSlaveBuildWrapper.java, enabling attackers with permissions to configure jobs to read arbitrary files from the Jenkins master filesystem. The connected sources c...