← Database

CVE-2022-41231

MEDIUM CVSS: 5.7 Published: 2022-09-21 Modified: 2026-06-17

Description

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint.

Affected Platforms

Jenkins Build-Publisher

Weakness Type

CWE-22, CWE-22

References