Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54945
HistoryMar 31, 2022 - 12:00 a.m.

Jenkins Continuous Integration with Toad Edge Plugin路径遍历漏洞

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

39.7%

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A path traversal vulnerability exists in Jenkins Continuous Integration with Toad Edge Plugin version 2.3 and earlier, which stems from the possibility that the file browser may interpret certain file paths as absolute paths on Windows. An attacker with Item/Read privileges could exploit this vulnerability to obtain the contents of arbitrary files on a Windows controller.

0.001 Low

EPSS

Percentile

39.7%

Related for CNVD-2022-54945