CVE-2018-1000406

A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an...

CVE-2018-1000406

CVE-2018-1000406 documents a path traversal vulnerability in Jenkins 2.145 and earlier (including LTS 2.138.1 and earlier) in file handling code located at core/src/main/java/hudson/model/FileParameterValue.java. An attacker with Job/Configure permission can define a file parameter whose name esc...

Jenkins < 2.146 and < 2.138.2 LTS Multiple Vulnerabilities - Linux

Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...