Lucene search
PRIOn knowledge basePRION:CVE-2022-34179HistoryJun 23, 2022 - 5:15 p.m.
Path traversal
2022-06-2317:15:00
PRIOn knowledge base
www.prio-n.com
4
0.002 Low
EPSS
Percentile
51.8%
Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a style query parameter that is used to choose a different SVG image style without restricting possible values, resulting in a relative path traversal vulnerability that allows attackers without Overall/Read permission to specify paths to other SVG images on the Jenkins controller file system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| embeddable_build_status | le | 2.0.3 |
Related
osv
osv
Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
2022-06-24 00:00:31
CVE-2022-34179
2022-06-23 17:15:15
cvelist
cvelist
CVE-2022-34179
2022-06-22 14:41:04
github
github
Path Traversal vulnerability in Jenkins Embeddable Build Status Plugin
2022-06-24 00:00:31
cve
cve
CVE-2022-34179
2022-06-23 17:15:15
nvd
nvd
CVE-2022-34179
2022-06-23 17:15:15
nessus
nessus
Jenkins LTS < 2.332.4 / Jenkins weekly < 2.356 Multiple Vulnerabilities
2022-07-15 00:00:00
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.14 / 2.332.4.1 / 2.346.1.4 Multiple Vulnerabilities (CloudBees Security Advisory 2022-06-22)
2022-07-05 00:00:00
Jenkins plugins Multiple Vulnerabilities (2022-06-22)
2022-07-15 00:00:00