CVE-2023-46655
mediumpriority · track · 26EPSS 0.014 · 72 %ileDEEUUSEPSS · scored 2026-10-26
Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to publish arbitrary files from the Jenkins controller file system to the previously configured CloudBees CD server.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
- Jenkins Jenkins Edgewall Trac Plugin <= 1.13all versionscert_bundDEcpe:/a:cloudbees:jenkins:edgewall_trac_plugin__1.13
- Jenkins Jenkins Gogs Plugin <= 1.0.15all versionscert_bundDEcpe:/a:cloudbees:jenkins:gogs_plugin__1.0.15
- Jenkins Jenkins MSTeams Webhook Trigger Plugin <= 0.1.1all versionscert_bundDEcpe:/a:cloudbees:jenkins:msteams_webhook_trigger_plugin__0.1.1
- Jenkins Jenkins Multibranch Scan Webhook Trigger Plugin <= 1.0.9all versionscert_bundDEcpe:/a:cloudbees:jenkins:multibranch_scan_webhook_trigger_plugin__1.0.9
- Jenkins Jenkins Zanata Plugin <= 0.6all versionscert_bundDEcpe:/a:cloudbees:jenkins:zanata_plugin__0.6
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2023-2750Jenkins: Mehrere SchwachstellenDeutsch2023-10-25csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.
- GHSA-9ggw-h9mf-4jh7Jenkins CloudBees CD Plugin vulnerable to arbitrary file read2023-10-25ghsa · osvUS
Jenkins CloudBees CD Plugin temporarily copies files from an agent workspace to the controller in preparation for publishing them in the 'CloudBees CD - Publish Artifact' post-build step. CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the temporary directory on the controller when collecting the list of files to publish. This allows attackers able to configure jobs to publish arbitrary files from the Jenkins controller file system to the previously configured CloudBees CD server. CloudBees CD Plugin 1.1.33 ensures that only files located within the expected directory are published.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2023/10/25/2cnnvd
- https://cxsecurity.com/cveshow/CVE-2023-46655/cnnvd
- https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3238cnnvd
- http://www.openwall.com/lists/oss-security/2023/10/25/2enisa_euvd
- https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3238enisa_euvd
- http://www.openwall.com/lists/oss-security/2023/10/25/2Mailing Listnvd
- https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3238Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan