Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2023-43497 - Vulnerability Database
Jenkins

Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability - CVE-2023-43497

High
Reference: CVE-2023-43497
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-43497
Title: Jenkins Unrestricted Upload of File with Dangerous Type Vulnerability
Overview:

In Jenkins 2.423 and earlier LTS 2.414.1 and earlier processing file uploads using the Stapler web framework creates temporary files in the default system temporary directory with the default permissions for newly created files potentially allowing attackers with access to the Jenkins controller file system to read and write the files before they are used.