| Package | Affected versions | Patched versions |
|---|---|---|
| jenkins | < 2.568.2< 2.576 | 2.568.22.576 |
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free