Количество 6
Количество 6

CVE-2023-43498
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.

CVE-2023-43498
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.
CVE-2023-43498
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file ...
GHSA-hq87-h4jg-vxfw
Jenkins temporary uploaded file created with insecure permissions

BDU:2024-02892
Уязвимость сервера автоматизации Jenkins, связанная с созданием временных файлов с небезопасными разрешениями, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов

ROS-20240411-08
Множественные уязвимости jenkins
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
![]() | CVE-2023-43498 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used. | CVSS3: 3.6 | 0% Низкий | почти 2 года назад |
![]() | CVE-2023-43498 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used. | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
CVE-2023-43498 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file ... | CVSS3: 8.1 | 0% Низкий | почти 2 года назад | |
GHSA-hq87-h4jg-vxfw Jenkins temporary uploaded file created with insecure permissions | CVSS3: 3.6 | 0% Низкий | почти 2 года назад | |
![]() | BDU:2024-02892 Уязвимость сервера автоматизации Jenkins, связанная с созданием временных файлов с небезопасными разрешениями, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов | CVSS3: 8.1 | 0% Низкий | почти 2 года назад |
![]() | ROS-20240411-08 Множественные уязвимости jenkins | CVSS3: 8.8 | около 1 года назад |
Уязвимостей на страницу