What is GHSA-47rr-8vrp-9283?

GHSA-47rr-8vrp-9283 is a security advisory published by GitHub Security Advisories with Medium severity. Arbitrary file read vulnerability in Jenkins File System SCM Plugin

Which CVE IDs does GHSA-47rr-8vrp-9283 cover?

GHSA-47rr-8vrp-9283 covers the following CVE IDs: CVE-2019-10375. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-47rr-8vrp-9283?

GHSA-47rr-8vrp-9283 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-47rr-8vrp-9283?

GHSA-47rr-8vrp-9283 affects 1 product, including: maven/hudson.plugins.filesystem_scm:filesystem_scm:\u003c= 2.1.

GHSA-47rr-8vrp-9283MediumCVSS 6.5

Arbitrary file read vulnerability in Jenkins File System SCM Plugin

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

January 30, 2024

🔗 CVE IDs covered (1)

CVE-2019-10375 →

📋 Description

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.

🎯 Affected products1

maven/hudson.plugins.filesystem_scm:filesystem_scm:<= 2.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-10375
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://github.com/advisories/GHSA-47rr-8vrp-9283