1 matches found
Path traversal allows exploiting XXE vulnerability in jobConfigHistory
jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict timestamp query parameters in multiple endpoints. This allows attackers with Job Config History/DeleteEntry permission to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file...
8.8CVSS7.1AI score0.00905EPSS
SaveExploits0Affected Software1
20