Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins CloudBees CD Plugin — Jenkins Security Advisory 2023-10-25 Clear all filters
TI-2023-25157 CVE-2023-46655 · GHSA-9ggw-h9mf-4jh7

Link following in Jenkins CloudBees CD Plugin

Priority LOW 32

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attack…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01398 Published 2023-10-25 Fixed in 1.1.33 CWE-59
TI-2023-25156 CVE-2023-46654 · GHSA-jx7x-rf3f-j644

Link following in Jenkins CloudBees CD Plugin

Priority MEDIUM 41

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01628 Published 2023-10-25 Fixed in 1.1.33 CWE-59