Skip to content
Sign in
5.7 Medium

CVE-2022-41231 Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any…

Description

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.

Affected products and versions

Product Affected versions Fixed in
Jenkins Build-Publisher Plugin 1.22 earliest → 1.22 No fix stated

Other CVEs of Jenkins Build-Publisher Plugin

The 3 CVEs of Jenkins Build-Publisher Plugin →
CVE-2022-41232 A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to… 8.0 High CVE-2022-41230 Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing… 4.3 Medium
Track this CVE