Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-1807)

Description

Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions to read arbitrary files via a symlink, related to building artifacts.

Remediation

References

CVE-2015-1807

Related Vulnerabilities

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7945)

WordPress Plugin Extend WordPress-Various Shortcodes & Widgets TimThumb Arbitrary File Upload (2.1.01)

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.13)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.30)

MySQL CVE-2017-3450 Vulnerability (CVE-2017-3450)

Severity

Low

Classification

CVE-2015-1807 CWE-22