CVE-2022-23107

Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with…

published January 12, 2022

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01886 · 79.3th percentile
Published
2022-01-12T19:06Z
EPSS history
Timeline
  • 12 JAN 19:06Z
    Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with…
    cvelistv5