com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), org.jenkins-ci.plugins:php (1.0) +1 more potentially affected by CVE-2024-28151 via org.jenkins-ci.plugins:htmlpublisher (>=1.0, <=1.6)

org.jenkins-ci.plugins:htmlpublisher MAVEN version =1.0, =1.9.2-beta, =1.0.0, =1.0.18 Source cves: CVE-2024-28151 Source advisory: OSV:GHSA-478X-M3MX-7J3F...

CVE-2024-28151

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to...

CVE-2024-28151

The Jenkins HTML Publisher Plugin (version 1.32 and earlier ) is vulnerable to a Path Traversal flaw. The root cause is the improper archiving of invalid symbolic links in report directories on agents and their subsequent recreation on the Jenkins controller. This oversight allows attackers with ...

CVE-2024-28151

Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to...