CVE-2019-10352

MEDIUM

Jenkins < 2.176.1, < 2.185 - Authenticated Arbitrary File Write via File Parameter

Title source: llm
STIX 2.1

Description

A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.

References (6)

Core 6
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2019-35
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2019/07/17/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/109299
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2503
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2548

Scores

CVSS v3 6.5
EPSS 0.3996
EPSS Percentile 97.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-22
Status published
Products (3)
jenkins/jenkins < 2.176.1
jenkins/jenkins < 2.185
org.jenkins-ci.main/jenkins-core 0 - 2.176.2Maven
Published Jul 17, 2019
Tracked Since Feb 18, 2026