Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21311
HistoryAug 16, 2019 - 12:17 a.m.

Directory Traversal

2019-08-1600:17:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.528 Medium

EPSS

Percentile

97.6%

jenkins is vulnerable to directory traversal. An attacker is able to write arbitrary files via the file parameter core/src/main/java/hudson/model/FileParameterValue.java by exploiting the directory traversal vulnerability using ../ characters.