Description

A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.

Remediation

References

http://www.openwall.com/lists/oss-security/2019/11/21/1

https://jenkins.io/security/advisory/2019-11-21/#SECURITY-1634

Related Vulnerabilities

CVE-2020-7748 Vulnerability in npm package @tsed/core

CVE-2019-18213 Vulnerability in maven package org.lsp4xml:org.eclipse.lsp4xml.extensions.emmet

CVE-2018-16478 Vulnerability in npm package simplehttpserver

CVE-2017-7683 Vulnerability in maven package org.apache.openmeetings:openmeetings-server

CVE-2019-15138 Vulnerability in npm package html-pdf

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Mailing List Third Party Advisory Vendor Advisory