Path traversal vulnerability in Jenkins Matrix Project Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-23900 · ADVISORY
• jenkinsci/matrix-project-plugin commit f7a5b24 · WEB
• jenkinsci/matrix-project-plugin · PACKAGE
• jenkins.io/security/advisory/2024-01-24 · WEB
• openwall.com/lists/oss-security/2024/01/24/6 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:matrix-project

• CVE-2022-20615TRUNG BÌNH 5.4Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resultin…
• CVE-2020-2225TRUNG BÌNH 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple…
• CVE-2020-2224TRUNG BÌNH 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single…
• CVE-2019-1003031NGHIÊM TRỌNG 9.9A sandbox bypass vulnerability exists in Jenkins Matrix Project Plugin 1.13 and earlier in pom.xml, src/main/java/hudson/matrix/FilterScript…