Description
An arbitrary file write vulnerability in Jenkins CLIF Performance Testing Plugin 64.vc0d66de1dfb_f and earlier allows attackers with Overall/Read permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins CLIF Performance Testing Plugin | unspecified – ≤ 64.vc0d66de1dfb_f | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:clif-performance-testing | < 71.v0741865e206f | 71.v0741865e206f | GHSA-6xf5-c3cx-67pv |
Advisories 1
- WID-SEC-2022-0852 Jenkins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 12, 2023