Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/09/2023 Updated: 11/09/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and previous versions does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jenkins job configuration history

CWE-611 https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3235 http://www.openwall.com/lists/oss-security/2023/09/06/9 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-41932

Vulnerability Summary

References

Vulmon Search

About

Products

Connect