CESS-2022-36890 — Vulnetix

CESS-2022-36890 PUBLISHED CVSS 4.3 MEDIUM

Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Risk Scores

CVSS 3.1

4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Timeline

Jul 27, 2022 CVE Published

Open in Interactive Console →