Back to search
CVE-2023-41932
Published: Sep 6, 2023
Modified: Sep 26, 2024
PUBLISHED
Description
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.
| Vendor | Product | Versions |
|---|---|---|
Jenkins Project | Jenkins Job Configuration History Plugin | affected 0 - <= 1227.v7a_79fc4dc01f |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now