Description

A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFilter.java that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing the agent-to-master security subsystem protection.

Remediation

References

CVE-2018-1000194

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-3715)

PrestaShop Improper Authentication Vulnerability (CVE-2021-21308)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5)

WordPress Plugin Custom Search by BestWebSoft Cross-Site Scripting (1.35)

WordPress Plugin Mass Pages/Posts Creator Cross-Site Scripting (1.2.2)

Severity

High

Classification

CVE-2018-1000194 CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities