Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-27203 · ADVISORY
• jenkins.io/security/advisory/2022-03-15 · WEB
• openwall.com/lists/oss-security/2022/03/15/2 · WEB

org.jenkins-ci.plugins:extended-choice-parameter のその他の脆弱性

• CVE-2022-29038中 5.4Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice paramete…
• CVE-2022-27205中 4.3A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers with Overall/Read per…
• CVE-2022-27204高 8.8A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier allows attackers to co…
• CVE-2022-27202中 5.4Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice paramet…