Lucene search
GoogleOSV:GHSA-VQ7J-6PCQ-F48PHistoryMay 24, 2022 - 5:28 p.m.
Path traversal vulnerability in Blue Ocean Plugin
2022-05-2417:28:24
Google
osv.dev
12
blue ocean plugin
path traversal vulnerability
undocumented feature
jenkins controller file system
EPSS
0.001
Percentile
48.5%
Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag, blueocean.features.GIT_READ_SAVE_TYPE, that when set to the value clone allows an attacker with Item/Configure or Item/Create permission to read arbitrary files on the Jenkins controller file system.
Blue Ocean Plugin 1.23.3 no longer includes this feature and redirects existing usage to a safer alternative.
Related
osv
osv
CVE-2020-2254
2020-09-16 14:15:13
redhatcve
redhatcve
CVE-2020-2254
2020-09-18 16:00:14
prion
prion
Design/Logic Flaw
2020-09-16 14:15:00
cve
cve
CVE-2020-2254
2020-09-16 14:15:13
cvelist
cvelist
CVE-2020-2254
2020-09-16 13:20:39
github
github
Path traversal vulnerability in Blue Ocean Plugin
2022-05-24 17:28:24
veracode
veracode
Path Traversal
2020-10-28 11:04:16
nvd
nvd
CVE-2020-2254
2020-09-16 14:15:13
redhat
redhat
nessus
nessus
RHEL 7 : OpenShift Container Platform 3.11.318 jenkins-2-plugins (RHSA-2020:5102)
2020-11-17 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.6.1 (RHSA-2020:4297)
2020-10-28 00:00:00