Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2023/09/06 12:00 a.m.•35 views

Path traversal allows exploiting XXE vulnerability in jobConfigHistory

jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict timestamp query parameters in multiple endpoints. This allows attackers with Job Config History/DeleteEntry permission to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file...

8.8CVSS7.1AI score0.00905EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder