GitHub Advisoryadvisory · Maven

GHSA-8xr3-54w2-8xjp Jenkins Image Gallery Plugin allows Path Traversal

MEDIUM Published 2022-05-13 Modified 2025-03-13 Official page ↗
Aliases
CVE-2016-4987
Ecosystem
Maven
Packages
com.tupilabs.image_gallery:image-gallery
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2025-03-13

Affected packages

• Maven com.tupilabs.image_gallery:image-gallery: < 1.4 → fixed in 1.4

Description

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.

Related

Alias · CVE (1)

  • CVE-2016-4987 Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References