aendter.jenkins.plugins:filesystem-list-parameter-plugin

2 results · Feed

• Medium 4.3
  CVE-2024-54004

  Jenkins Filesystem List Parameter Plugin has Path Traversal vulnerability

  Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.

  Jenkins Project Jenkins Filesystem List Parameter Plugin aendter.jenkins.plugins:filesystem-list-parameter-plugin Web / CMS Maven
  Nov 27, 2024
• High 8.0
  CVE-2022-34187

  Cross-site Scripting in Jenkins Filesystem List Parameter Plugin

  Jenkins Filesystem List Parameter Plugin 0.0.7 and earlier does not escape the name and description of File system objects list parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers …

  Jenkins Project Jenkins Filesystem List Parameter Plugin aendter.jenkins.plugins:filesystem-list-parameter-plugin Web / CMS Maven
  Jun 22, 2022