CVE-2023-50764

creationtimestamp| type| source ---|---|--- 2024-01-10 12:41:33+00:00| seen| https://t.me/ctinow/165750...

com.seitenbau.jenkins.plugins:dynamicparameter (0.2.0) potentially affected by CVE-2023-50764 via org.jenkins-ci.plugins:scriptler (2.2)

org.jenkins-ci.plugins:scriptler MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:scriptler and may be impacted: - com.seitenbau.jenkins.plugins:dynamicparameter 0.2.0 Source cves: CVE-2023-50764 Source advisory:...

CVE-2023-50764

Jenkins Scriptler Plugin 342.v6a89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system...

CVE-2023-50764

CVE-2023-50764 concerns the Jenkins Scriptler Plugin (versions 342.v6a_89fd40f466 and earlier). The vulnerability stems from an unrestricted file-name query parameter in an HTTP endpoint, which, if an attacker has Scriptler/Configure permission, can lead to deletion of arbitrary files on the Jenk...

CVE-2023-50764

Jenkins Scriptler Plugin 342.v6a89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system...