Non notée

CVE-2023-46654 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory…

Description

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitrary files on the Jenkins controller file system.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Jenkins CloudBees CD Plugin 1.1	premières → 1.1.32	Pas de correctif indiqué

Les 3 CVE de Jenkins CloudBees CD Plugin →

CVE-2023-46655 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which… Non notée CVE-2021-21647 Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing… Non notée

Vous utilisez Jenkins CloudBees CD Plugin ?

Suivre cette CVE Surveiller Jenkins CloudBees CD Plugin Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2023-46654

Chronologie

Publiée 25 octobre 2023
Dernière modification 13 février 2025

Références

Jenkins Security Advisory 2023-10-25 www.jenkins.io
www.openwall.com www.openwall.com

Suivre cette CVE

CVE-2023-46654 Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory…

Description

Produits et versions touchés

Autres CVE de Jenkins CloudBees CD Plugin