DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2023-27903

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-27903

CGA ID

CGA-mr6p-7wm9-3pmp

Severity

4.4

Medium

CVSS V3

Description

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.

References

  • https://images.chainguard.dev/security/CGA-mr6p-7wm9-3pmp

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images