Количество 4
Количество 4
CVE-2024-28151
Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.
CVE-2024-28151
Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.
GHSA-478x-m3mx-7j3f
Jenkins HTML Publisher Plugin Path traversal vulnerability
BDU:2024-01992
Уязвимость плагина Jenkins HTML Publisher, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю читать произвольные файлы
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-28151 Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад | |
CVE-2024-28151 Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it. | CVSS3: 4.3 | 0% Низкий | почти 2 года назад | |
GHSA-478x-m3mx-7j3f Jenkins HTML Publisher Plugin Path traversal vulnerability | CVSS3: 4.3 | 0% Низкий | почти 2 года назад | |
BDU:2024-01992 Уязвимость плагина Jenkins HTML Publisher, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю читать произвольные файлы | CVSS3: 4.3 | 0% Низкий | почти 2 года назад |
Уязвимостей на страницу