CVE-2022-36889

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in maven/org.jenkins-ci.plugins/deployer-framework

Identifiers

CVE-2022-36889

Package Slug

maven/org.jenkins-ci.plugins/deployer-framework

Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Description

Jenkins Deployer Framework Plugin 85.v1d1888e8c021 and earlier does not restrict the application path of the applications when configuring a deployment, allowing attackers with Item/Configure permission to upload arbitrary files from the Jenkins controller file system to the selected service.

Affected Versions

All versions up to 85.v1d1888e8c021

Solution

Unfortunately, there is no solution available yet.

Last Modified

2022-08-04

source