Description

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

Remediation

References

CVE-2014-2058

Related Vulnerabilities

WordPress Plugin HUSKY-Products Filter Professional for WooCommerce SQL Injection (1.3.6)

WordPress Plugin PHP Event Calendar for WordPress Arbitrary File Upload (1.6)

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6003)

WordPress Plugin Download Manager Directory Traversal (3.2.54)

WordPress Plugin Bad Behavior Multiple Cross-Site Scripting Vulnerabilities (2.2.4)

Severity

Medium

Classification

CVE-2014-2058 CWE-264

Tags

Missing Update Known Vulnerabilities