Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2018/06/25 12:00 a.m.•19 views

Arbitrary file write vulnerability in Fortify CloudScan Plugin

Fortify CloudScan Plugin did not validate file names in rulepack ZIP archives it extracts, resulting in an arbitrary file write vulnerability. Fortify CloudScan Plugin 1.5.2 and newer rejects relative paths escaping the ZIP extraction base directory...

6.5CVSS6.6AI score0.00852EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder