Path traversal vulnerability in Blue Ocean Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-2254 · ADVISORY
• jenkinsci/blueocean-plugin commit f0dd4b6 · WEB
• jenkinsci/blueocean-plugin · PACKAGE
• jenkins.io/security/advisory/2020-09-16 · WEB
• openwall.com/lists/oss-security/2020/09/16/3 · WEB

Lỗ hổng khác của io.jenkins.blueocean:blueocean

• CVE-2023-40341CAO 8.8A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker…
• CVE-2020-2255TRUNG BÌNH 4.3A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an at…
• CVE-2019-1003013TRUNG BÌNH 5.4An cross-site scripting vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-commons/src/main/java/io/jenkins/…
• CVE-2019-1003012TRUNG BÌNH 6.5A data modification vulnerability exists in Jenkins Blue Ocean Plugins 1.10.1 and earlier in blueocean-core-js/src/js/bundleStartup.js, blue…
• CVE-2017-1000110TRUNG BÌNH 4.3Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches co…