Skip to content
Sign in
8.8 High

CVE-2026-84671 Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins…

Description

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution.

Affected products and versions

Product Affected versions Fixed in
Jenkins File Parameter Plugin Versions not published

Other CVEs of Jenkins File Parameter Plugin

The 2 CVEs of Jenkins File Parameter Plugin →
CVE-2023-32986 Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file… 8.8 High
Track this CVE