CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...

CVE-2024-5273

CVE-2024-5273: Affects Jenkins Report Info Plugin up to version 1.2. Root cause is lack of workspace path validation when serving report files. Attackers with Item/Configure permission can edit the workspace path to read Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors from...

CVE-2024-5273

Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving report files, allowing attackers with Item/Configure permission to retrieve Surefire failures, PMD violations, Findbugs bugs, and Checkstyle errors on the controller file system by...