Archive
20 February 2018
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 6.5
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins mas…