https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:59:56 +0000 https://cve.radiocsirt.org/vuln/cve-2022-34177 <p><strong>Affected:</strong> Jenkins project Jenkins Pipeline: Input Step Plugin</p> <p>Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside a build-related directory, allowing attackers able to configure Pipelines to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.</p> <p><strong>Affected:</strong> Jenkins project Jenkins Pipeline: Input Step Plugin</p> <p>Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside a build-related directory, allowing attackers able to configure Pipelines to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.</p> https://cve.radiocsirt.org/vuln/cve-2022-34177