Количество 6
Количество 6
CVE-2023-43497
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.
CVE-2023-43497
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.
CVE-2023-43497
In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file ...
GHSA-qv64-w99c-qcr9
Jenkins temporary uploaded file created with insecure permissions
BDU:2024-02901
Уязвимость сервера автоматизации Jenkins, связанная с неограниченной загрузкой файла опасного типа, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов
ROS-20240411-08
Множественные уязвимости jenkins
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-43497 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used. | CVSS3: 3.6 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-43497 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used. | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
| CVE-2023-43497 In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file ... | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
| GHSA-qv64-w99c-qcr9 Jenkins temporary uploaded file created with insecure permissions | CVSS3: 3.6 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-02901 Уязвимость сервера автоматизации Jenkins, связанная с неограниченной загрузкой файла опасного типа, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов | CVSS3: 8.1 | 0% Низкий | больше 2 лет назад |
 | ROS-20240411-08 Множественные уязвимости jenkins | CVSS3: 8.8 | почти 2 года назад |
Уязвимостей на страницу