CVE-2023-35147

Опубликовано: 14 июн. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with Item/Read permission to obtain the contents of arbitrary files on the Jenkins controller file system.

Ссылки

http://www.openwall.com/lists/oss-security/2023/06/14/5
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3099
Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/06/14/5
Mailing List
Third Party Advisory
https://www.jenkins.io/security/advisory/2023-06-14/#SECURITY-3099
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jenkins:aws_codecommit_trigger:*:*:*:*:*:jenkins:*:*

Версия до 3.0.12 (включая)

EPSS

Процентиль: 21%

0.00067

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVE-2023-35147

CVSS3: 6.5

redhat

больше 2 лет назад

GHSA-whgj-6m78-2gg9

CVSS3: 6.5

github

больше 2 лет назад

Arbitrary file read vulnerability in Jenkins AWS CodeCommit Trigger Plugin

EPSS

Процентиль: 21%

0.00067

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-732