Lucene search
GoogleOSV:CVE-2022-23107HistoryJan 12, 2022 - 8:15 p.m.
CVE-2022-23107
2022-01-1220:15:09
Google
osv.dev
3
Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| warnings-ng-plugin | eq | 9.5.0 | |
| warnings-ng-plugin | eq | 9.5.1 |
Related
cve
cve
CVE-2022-23107
2022-01-12 20:15:09
osv
osv
Path Traversal in Jenkins Warnings Next Generation Plugin
2022-01-21 23:38:05
prion
prion
Hardcoded credentials
2022-01-12 20:15:00
nvd
nvd
CVE-2022-23107
2022-01-12 20:15:09
alpinelinux
alpinelinux
CVE-2022-23107
2022-01-12 20:15:09
cvelist
cvelist
CVE-2022-23107
2022-01-12 19:06:06
github
github
Path Traversal in Jenkins Warnings Next Generation Plugin
2022-01-21 23:38:05
nessus
nessus
Jenkins Enterprise and Operations Center < 2.277.43.0.5 / 2.319.2.5 Multiple Vulnerabilities (CloudBees Security Advisory 2022-01-12)
2022-02-15 00:00:00
Jenkins LTS < 2.319.2 / Jenkins weekly < 2.330 Multiple Vulnerabilities
2022-01-21 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-01-12)
2022-01-21 00:00:00