Maven/org.jenkins-ci.main:jenkins-core CVE-2018-1000194: high 8.1, EPSS 2.57%

Path Traversal in Jenkins

Action: Upgrade org.jenkins-ci.main:jenkins-core to 2.107.3 (2.107.x) or 2.121 (2.121.x) or later.

Affected

Fixed versions

Sources

• osv: GHSA-x646-m7x2-gcp7
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000194
• https://github.com/jenkinsci/jenkins/commit/5cf0a77d44310523b763698f67d645c1f2427f30
• https://github.com/jenkinsci/jenkins
• https://jenkins.io/security/advisory/2018-05-09/#SECURITY-788
• https://www.oracle.com/security-alerts/cpuapr2022.html

CVE-2018-1000194 · published 2022-05-13T01:01:01Z · modified 2023-11-08T03:59:37.296435Z · JSON