1 matches found
Arbitrary file read vulnerability through symbolic links in pipeline-groovy-lib
pipeline-groovy-lib 797.v90eaa9be45a0 and earlier does not prohibit symbolic links in shared libraries. This allows attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. pipeline-groovy-lib 798.v5cc688825312 prohibi...
7.5CVSS5.4AI score0.00434EPSS
SaveExploits0Affected Software1
20