En resumen
- CVE-2022-28148 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a org.jenkins-ci.plugins:ci-with-toad-edge, continuous integration with toad edge (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 79.0% de las vulnerabilidades.
- Solución: actualizar a 2.4 o posterior.
Description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
NVD description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
Más vulnerabilidades de org.jenkins-ci.plugins:ci-with-toad-edge
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free