Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Improper Input Validation Vulnerability - CVE-2017-1000391 - Vulnerability Database
Jenkins

Jenkins Improper Input Validation Vulnerability - CVE-2017-1000391

High
Reference: CVE-2017-1000391
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-1000391
Title: Jenkins Improper Input Validation Vulnerability
Overview:

Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 39people39 which encompasses actual user accounts as well as users appearing in SCM in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional escaping potentially resulting in problems like overwriting of unrelated configuration files.