CVE-2018-1999002
23.07.2018, 19:29
A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to.Enginsight
| Vendor | Product | Version |
|---|---|---|
| jenkins | jenkins | 𝑥 ≤ 2.121.1 |
| jenkins | jenkins | 2.122 ≤ 𝑥 ≤ 2.132 |
| oracle | communications_cloud_native_core_automated_test_suite | 1.9.0 |
𝑥
= Vulnerable software versions
References