Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Improper Input Validation Vulnerability - CVE-2018-1999002 - Vulnerability Database
Jenkins

Jenkins Improper Input Validation Vulnerability - CVE-2018-1999002

High
Reference: CVE-2018-1999002
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1999002
Title: Jenkins Improper Input Validation Vulnerability
Overview:

A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier 2.121.1 and earlier in the Stapler web framework39s org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to.