4.3 Medium

CVE-2025-67643 Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path…

Description

Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspace directory.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Redpen - Pipeline Reporter for Jira Plugin	Versions not published

Do you use Jenkins Redpen - Pipeline Reporter for Jira Plugin?

Track this CVE Watch Jenkins Redpen - Pipeline Reporter for Jira Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-67643

Timeline

Published December 10, 2025
Last modified December 10, 2025

References

Jenkins Security Advisory 2025-12-10 www.jenkins.io

Track this CVE