Description

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

Remediation

References

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20

Related Vulnerabilities

CVE-2018-11087 Vulnerability in maven package org.springframework.amqp:spring-amqp

CVE-2022-45875 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-alert-plugins

CVE-2016-8751 Vulnerability in maven package org.apache.ranger:ranger

CVE-2023-41329 Vulnerability in maven package org.wiremock:wiremock-standalone

CVE-2022-33683 Vulnerability in maven package org.apache.pulsar:pulsar-broker

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Vendor Advisory CWE-22