GitHub Advisoryadvisory · Maven

GHSA-64q9-f38h-9mwx Protection Mechanism Failure in Jenkins Doktor Plugin

MEDIUM Published 2022-02-16 Modified 2023-10-27 Official page ↗
Aliases
CVE-2022-25204
Ecosystem
Maven
Packages
by.dev.madhead.doktor:doktor
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Reviewed
2022-02-24

Affected packages

• Maven by.dev.madhead.doktor:doktor: <= 0.4.1 (no fix yet)

Description

Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown or Asciidoc, and error messages allow attackers able to control agent processes to determine whether a file with a given name exists.

Related

Alias · CVE (1)

  • CVE-2022-25204 Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown… vulnerability

References