Em resumo
- CVE-2022-28148 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta org.jenkins-ci.plugins:ci-with-toad-edge, continuous integration with toad edge (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 1.8%, maior que 79.0% das vulnerabilidades.
- Correção: atualize para 2.4 ou posterior.
Description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
NVD description
The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Item/Read permission to obtain the contents of arbitrary files on Windows controllers.
Mais vulnerabilidades de org.jenkins-ci.plugins:ci-with-toad-edge
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free