GHSA-5p59-v5wm-77v4
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
At a glance
- Published
- Updated
- CVE
- CVE-2018-6356
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins master they should not have access to. On Windows, any file accessible to the Jenkins master process could be downloaded. On other operating systems, any file within the Jenkins home directory accessible to the Jenkins master process could be downloaded.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.jenkins-ci.main:jenkins-core | introduced 0, fixed 2.89.4 |
| Maven · org.jenkins-ci.main:jenkins-core | introduced 2.90, fixed 2.107 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-6356 ADVISORY
- https://github.com/jenkinsci/jenkins/commit/9de62915807deab61d6e780eed660428f9889b51 WEB
- https://github.com/jenkinsci/jenkins/commit/eb03a42078f29dbed3742b8740c95e02890e4545 WEB
- https://github.com/jenkinsci/jenkins WEB
- https://jenkins.io/security/advisory/2018-02-14 WEB
- https://web.archive.org/web/20200227130607/http://www.securityfocus.com/bid/103037 WEB
- https://www.oracle.com/security-alerts/cpuapr2022.html WEB
- http://www.openwall.com/lists/oss-security/2018/02/14/1 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |