Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 20/09/2023 Updated: 23/09/2023

CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8

VMScore: 0

In Jenkins 2.423 and previous versions, LTS 2.414.1 and previous versions, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jenkins jenkins

DescriptionThe MITRE CVE dictionary describes this issue as: In Jenkins 2423 and earlier, LTS 24141 and earlier, processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files, potentially allowing attackers with access to the Jenkins ...

CWE-434 https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3073 http://www.openwall.com/lists/oss-security/2023/09/20/5 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2023-43497

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-43497

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect