Description

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.

Remediation

References

https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20

Related Vulnerabilities

CVE-2020-14366 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2017-7545 Vulnerability in maven package org.jbpm:jbpm-designer-backend

CVE-2022-36092 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore

CVE-2019-16571 Vulnerability in maven package org.jenkins-ci.plugins:rapiddeploy-jenkins

CVE-2022-41255 Vulnerability in maven package org.jenkins-ci.plugins:cons3rt

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Vendor Advisory