~ / search / GHSA-6h2c-g688-q9qr

GHSA-6h2c-g688-q9qr

Path traversal in Jenkins Phoenix AutoTest Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-28156

Packages

EcosystemPackageAffectedFixed in
Maven com.surenpi.jenkins:phoenix-autotest <= 1.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Jenkins Pipeline: Phoenix AutoTest Plugin 1.3 and earlier allows attackers with Item/Configure permission to copy arbitrary files and directories from the Jenkins controller to the agent workspace.

References

External links from the advisory. They lead to third-party sites.