GHSA-24jc-w55j-5p83

ghsaUSosv

Jenkins TAP Plugin allows Path Traversal

view advisory published 2022-05-13Licence: CC-BY-4.0

Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-4986US	high7.5	3.00% (87th)	—	2017-02-09
Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

references

External citations — patches, advisories, analysis.

https://github.com/jenkinsci/tap-pluginPACKAGE
https://github.com/jenkinsci/tap-plugin/commit/8e2a3aa86ce57a98c69e6038e15ae8fe47d08124WEB
https://nvd.nist.gov/vuln/detail/CVE-2016-4986ADVISORY
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-06-20WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan