Lucene search

Veracode Vulnerability DatabaseVERACODE:45846

HistoryMar 12, 2024 - 10:06 a.m.

Path Traversal

2024-03-1210:06:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

jenkins

html publisher plugin

path traversal

insufficient restrictions

follow_symlinks

htmlpublisher.java

symbolic links

item/configure permission

manipulate

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Jenkins HTML Publisher Plugin is vulnerable to Path Traversal. The vulnerability is caused due to insufficient restrictions on the FOLLOW_SYMLINKS variable within HtmlPublisher.java. The lack of finalization and the ability to change this variable via script during runtime allows attackers with Item/Configure permission to manipulate symbolic links, resulting in Path Traversal.

CPENameOperatorVersion
html publisher pluginle1.32
html publisher pluginle1.32

CPE	Name	Operator	Version
	html publisher plugin	le	1.32
	html publisher plugin	le	1.32

References

www.openwall.com/lists/oss-security/2024/03/06/3

github.com/advisories/GHSA-478x-m3mx-7j3f

github.com/jenkinsci/htmlpublisher-plugin/commit/6b840248dd0d691bbac9b515cd750b3f925909b2

www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3303