Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-41235 EUVD-2022-6791GHSA-f7fq-wp2x-jc25

Jenkins WildFly Deployer Plugin vulnerable to path traversal

Published Sep 21, 2022 · Updated May 28, 2025 · Assigned by jenkins

Description

Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins WildFly Deployer Plugin unspecified – ≤ 1.0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:wildfly-deployer <= 1.0.2 — GHSA-f7fq-wp2x-jc25

References