En bref
- CVE-2022-28148 est une vulnérabilité MOYENNE (CVSS 6.5) touchant org.jenkins-ci.plugins:ci-with-toad-edge, continuous integration with toad edge (jenkins).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.8%, plus élevée que 79.0% des vulnérabilités.
- Correctif : mettre à jour vers 2.4 ou plus récent.
Description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
NVD description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
Autres vulnérabilités de org.jenkins-ci.plugins:ci-with-toad-edge
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free