Lucene search
Veracode Vulnerability DatabaseVERACODE:47550HistoryJun 14, 2024 - 8:21 a.m.
Path Traversal
2024-06-1408:21:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
jenkins
path traversal
workspace
permission
controller file system
vulnerable
org.jenkins-ci.plugins:report-info is vulnerable to Path Traversal. The vulnerability is due to lack of path validation in the workspace directory, allowing attackers with Item/Configure permission to access restricted files on the controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| report info plugin | le | 1.2 | |
| report info plugin | le | 1.2 |
Related
vulnrichment
vulnrichment
CVE-2024-5273
2024-05-24 13:46:09
cve
cve
CVE-2024-5273
2024-05-24 14:15:17
cvelist
cvelist
CVE-2024-5273
2024-05-24 13:46:09
github
github
Jenkins Report Info Plugin Path Traversal vulnerability
2024-05-24 18:52:08
nvd
nvd
CVE-2024-5273
2024-05-24 14:15:17
osv
osv
Jenkins Report Info Plugin Path Traversal vulnerability
2024-05-24 18:52:08
nessus
nessus
Jenkins plugins Multiple Vulnerabilities (2024-05-24)
2024-05-24 00:00:00