Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapler/Stapler.java that allows attackers to send crafted HTTP requests returning the contents of any file on the Jenkins master file system that the Jenkins master has access to.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CloudBees Jenkins 安全漏洞
Vulnerability Description
CloudBees Jenkins（前称Hudson Labs）是美国CloudBees公司的一套基于Java开发的持续集成工具，它主要用于监控持续的软件版本发布/测试项目和一些定时执行的任务。 CloudBees Jenkins 2.132及之前版本和2.121.1及之前版本中的Stapler Web框架的org/kohsuke/stapler/Stapler.java文件存在任意文件读取漏洞。攻击者可通过发送特制的HTTP请求利用该漏洞读取Jenkins master文件系统上的任何文件内容（限于Je
CVSS Information
N/A
Vulnerability Type
N/A