GitHub Advisoryadvisory · Maven

GHSA-9pqq-h9qv-28fp Jenkins Config Rotator Plugin vulnerable to path traversal

HIGH Published 2022-11-16 Modified 2022-12-15 Official page ↗
Aliases
CVE-2022-45388
Ecosystem
Maven
Packages
org.jenkins-ci.main:config-rotator
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2022-11-21

Affected packages

• Maven org.jenkins-ci.main:config-rotator: <= 2.0.1 (no fix yet)

Description

Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated attackers to read arbitrary files with '.xml' extension on the Jenkins controller file system. Currently there is no known workaround and no fix available.

Related

Alias · CVE (1)

  • CVE-2022-45388 Jenkins Config Rotator Plugin 2.0.1 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing unauthenticated… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References