GitHub Advisoryadvisory · Maven

GHSA-47rr-8vrp-9283 Arbitrary file read vulnerability in Jenkins File System SCM Plugin

MEDIUM Published 2022-05-24 Modified 2024-01-30 Official page ↗
Aliases
CVE-2019-10375
Ecosystem
Maven
Packages
hudson.plugins.filesystem_scm:filesystem_scm
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2024-01-30

Affected packages

• Maven hudson.plugins.filesystem_scm:filesystem_scm: <= 2.1 (no fix yet)

Description

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.

Related

Alias · CVE (1)

  • CVE-2019-10375 An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References