Beveiligingsadvies

CVE-2023-32986

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-16 16:00:07

Laatst bijgewerkt 2025-01-23 20:29:53

Toegewezen door jenkins

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.

← Alle CVE's bekijken Bekijk op cve.org ↗