Skip to content
Sign in
4.3 Medium

CVE-2024-54004 Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system…

Description

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins Filesystem List Parameter Plugin 0.0 earliest → 0.0.14 No fix stated

Other CVEs of Jenkins Filesystem List Parameter Plugin

The 2 CVEs of Jenkins Filesystem List Parameter Plugin →
CVE-2022-34187 Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system… Not rated
Track this CVE