Lucene search
GoogleOSV:GHSA-QF38-F2FR-Q4X9HistoryMay 13, 2022 - 1:01 a.m.
Improper Input Validation in Jenkins
2022-05-1301:01:02
Google
osv.dev
14
improper input validation
jenkins
arbitrary file read
EPSS
0.063
Percentile
93.6%
A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web frameworkβs org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to.
References
github.com/jenkinsci/jenkins
github.com/jenkinsci/jenkins/commit/29ca81dd59c255ad633f1bd86cf1be40a5f02c64
github.com/jenkinsci/stapler/commit/8e9679b08c36a2f0cf2a81855d5e04e2ed2ac2b3
jenkins.io/security/advisory/2018-07-18/#SECURITY-914
nvd.nist.gov/vuln/detail/CVE-2018-1999002
www.exploit-db.com/exploits/46453
www.oracle.com/security-alerts/cpuapr2022.html
Related
checkpoint_advisories
checkpoint_advisories
Jenkins Directory Traversal (CVE-2018-1999002)
2022-10-24 00:00:00
github
github
Improper Input Validation in Jenkins
2022-05-13 01:01:02
nvd
nvd
CVE-2018-1999002
2018-07-23 19:29:00
seebug
seebug
Jenkins δ»»ζζδ»Άθ―»εζΌζ΄(CVE-2018-1999002)
2018-07-26 00:00:00
osv
osv
CVE-2018-1999002
2018-07-23 19:29:00
prion
prion
Design/Logic Flaw
2018-07-23 19:29:00
redhatcve
redhatcve
CVE-2018-1999002
2018-07-30 03:50:29
cvelist
cvelist
CVE-2018-1999002
2018-07-23 19:00:00
cve
cve
CVE-2018-1999002
2018-07-23 19:29:00
exploitpack
exploitpack
packetstorm
packetstorm
exploitdb
exploitdb
freebsd
freebsd
jenkins -- multiple vulnerabilities
2018-07-18 00:00:00
openvas
openvas
Jenkins < 2.133 and < 2.121.2 LTS Multiple Vulnerabilities - Linux
2018-07-24 00:00:00
Jenkins < 2.133 and < 2.121.2 LTS Multiple Vulnerabilities - Windows
2018-07-24 00:00:00
nessus
nessus
FreeBSD : jenkins -- multiple vulnerabilities (20a1881e-8a9e-11e8-bddf-d017c2ca229d)
2018-07-20 00:00:00
Jenkins < 2.121.2 / 2.133 Multiple Vulnerabilities
2018-08-09 00:00:00
archlinux
archlinux
[ASA-201807-14] jenkins: multiple issues
2018-07-21 00:00:00
githubexploit
githubexploit
Exploit for CVE-2014-4210
2022-03-19 01:54:15
Exploit for CVE-2014-4210
2022-03-19 01:54:15
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00