Most recent entries from all

bdu:2022-04847

EUVD-2026-18685

fkie_cve-2022-36914

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

GHSA-jj8j-6jq7-gmvh — Jenkins Files Found Trigger Plugin allows attackers to check for existence of attacker-specified file path on Jenkins c…

Affected: Maven: org.jenkins-ci.plugins:files-found-trigger

Jenkins Files Found Trigger Plugin 1.5 and earlier does not perform a permission check in a method implementing form validation.

This allows attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. A sequence of requests can be used to effectively list the Jenkins controller file system.

As of publication of this advisory, there is no fix.

gsd-2022-36914

WID-SEC-W-2022-0852 — Jenkins: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross Site Scripting oder CSRF Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Daten zu manipulieren