Jenkins directory traversal vulnerability

MEDIO 6.5CVE-2014-2059 · GHSA-v759-3fh9-84mx · Published 01/03/2014 · updated 17/06/2026

In breve

CVE-2014-2059 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.6%, superiore al 85.2% delle vulnerabilità.
Correzione: aggiornare a 1.551, 1.532.2 o successiva.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.533, < 1.551< 1.532.2`	`1.5511.532.2`
jenkins jenkins	`≤ 1.532.1≤ 1.550`	No fix yet

Description

Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2014-2059 · ADVISORY
jenkinsci/jenkins commit ad38d84 · WEB
exchange.xforce.ibmcloud.com/vulnerabilities/91346 · WEB
jenkinsci/jenkins · PACKAGE
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-02-14 · WEB
seclists.org/oss-sec/2014/q1/421 · WEB

Altre vulnerabilità di org.jenkins-ci.main:jenkins-core

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.main:jenkins-core

Maven

≥ 1.533, < 1.551< 1.532.2

1.5511.532.2

jenkins

≤ 1.532.1≤ 1.550

No fix yet

Description

NVD description

Altre vulnerabilità di org.jenkins-ci.main:jenkins-core

Vedi tutto →