Non notée
CVE-2022-36890 Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods…
Description
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the name of files in methods implementing form validation, allowing attackers with Item/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Deployer Framework Plugin 85 | premières → 85.v1d1888e8c021 | Pas de correctif indiqué |
| Jenkins Deployer Framework Plugin 1.3 | premières → < 1.3.1 | 1.3.1 |
Autres CVE de Jenkins Deployer Framework Plugin
Les 4 CVE de Jenkins Deployer Framework Plugin →
CVE-2022-36891
A missing permission check in Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier allows attackers with…
Non notée
CVE-2022-36889
Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the…
Non notée
CVE-2020-2227
Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in…
Non notée