CVE-2024-23904 - Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary files on the Jenkins controller file system

Back Back to CVE browser

HIGH

Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary files on the Jenkins controller file system

Published Jan 24, 2024

7.5

HIGH

CVSS 3.1

EPSS 0.88%

Description

Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary files on the Jenkins controller file system.

Affected products

Vendor Jenkins Project Product Jenkins Log Command Plugin Default
unknown
Affected
- ≥ 0, ≤ 1.0.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Jenkins Project	Jenkins Log Command Plugin	unknown	Affected ≥ 0, ≤ 1.0.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

http://www.openwall.com/lists/oss-security/2024/01/24/6
Mailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0404
Advisory
https://github.com/advisories/GHSA-qjpf-2jhx-3758
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23904
https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334
vendor-advisoryVendor Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2024/01/24/6		Mailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-0404		Advisory
https://github.com/advisories/GHSA-qjpf-2jhx-3758		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23904
https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3334		vendor-advisoryVendor Advisory