Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-28160 EUVD-2022-1294GHSA-3r5x-x6xf-m8fv

Arbitrary file read vulnerability in Jenkins Tests Selector Plugin

Published Mar 29, 2022 · Updated Aug 3, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Tests Selector Plugin Package: org.jenkins-ci.plugins:selected-tests-executor Category: Web / CMS Ecosystem: Maven

Description

Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Tests Selector Plugin unspecified – ≤ 1.3.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:selected-tests-executor <= 1.3.3 — GHSA-3r5x-x6xf-m8fv

References