Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-58431 State: PUBLISHED Published: 2025-09-17T17:25:08.811Z Last Updated: 2025-09-17T17:47:03.051Z Vendors: IceWhaleTech Products: ZimaOS Problem Types: CWE-250 Description: ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and earlier, the /v2_1/files/file/download endpoint allows file read from ANY USER who has access to localhost. File reads are performed AS ROOT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-vqrw-9v9m-6g87
CVE ID: CVE-2025-58432 State: PUBLISHED Published: 2025-09-17T17:31:20.968Z Last Updated: 2025-09-17T17:47:32.620Z Vendors: IceWhaleTech Products: ZimaOS Problem Types: CWE-250, CWE-269 Description: ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and all prior versions, the /v2_1/files/file/uploadV2 endpoint allows file upload from ANY USER who has access to localhost. File uploads are performed AS ROOT. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IceWhaleTech/ZimaOS/security/advisories/GHSA-3gp9-43rg-xrcc
CVE ID: CVE-2025-58434 State: PUBLISHED Published: 2025-09-12T17:37:08.190Z Last Updated: 2025-09-15T15:31:08.595Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: FlowiseAI Products: Flowise Problem Types: CWE-306 Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the `forgot-password` endpoint in Flowise returns sensitive information including a valid password reset `tempToken` without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO). This vul
eset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO). This vulnerability applies to both the cloud service (`cloud.flowiseai.com`) and self-hosted/local Flowise deployments that expose the same API. Commit 9e178d68873eb876073846433a596590d3d9c863 in version 3.0.6 secures password reset endpoints. Several recommended remediation steps are available. Do not return reset tokens or sensitive account details in API responses. Tokens must only be delivered securely via the registered email channel. Ensure `forgot-password` responds with a generic success message regardless of input, to avoid user enumeration. Require strong validation of th
responds with a generic success message regardless of input, to avoid user enumeration. Require strong validation of the `tempToken` (e.g., single-use, short expiry, tied to request origin, validated against email delivery). Apply the same fixes to both cloud and self-hosted/local deployments. Log and monitor password reset requests for suspicious activity. Consider multi-factor verification for sensitive accounts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph - https://github.com/FlowiseAI/Flowise/commit/9e178d68873eb876073846433a596590d3d9c863
CVE ID: CVE-2025-58435 State: PUBLISHED Published: 2025-09-09T19:43:47.379Z Last Updated: 2025-09-10T13:54:22.197Z Vendors: OSC Products: ondemand Problem Types: CWE-262 Description: Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop session and the other user would need to be authenticated to the portal. But obtaining the link would allow that user to perform any actions as the original user and access their data. Open OnDemand 3.1.15 and 4.0.7 have pa
llow that user to perform any actions as the original user and access their data. Open OnDemand 3.1.15 and 4.0.7 have patched this vulnerability and correctly rotate passwords for any version of TurboVNC. As a workaround, downgrade TurboVNC to a version lower than 3.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OSC/ondemand/security/advisories/GHSA-7vh8-mw9f-5r99
CVE ID: CVE-2025-58437 State: PUBLISHED Published: 2025-09-06T02:30:08.378Z Last Updated: 2025-09-08T16:45:15.915Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: coder Products: coder Problem Types: CWE-613, CWE-279, CWE-277 Description: Coder allows organizations to provision remote development environments via Terraform. In versions 2.22.0 through 2.24.3, 2.25.0 and 2.25.1, Coder can be compromised through insecure session handling in prebuilt workspaces. Coder automatically generates a session token for a user when a workspace is started. It is automatically exposed via coder_workspace_owner.session_token. Prebuilt workspaces are initially owned by a built
It is automatically exposed via coder_workspace_owner.session_token. Prebuilt workspaces are initially owned by a built-in prebuilds system user. When a prebuilt workspace is claimed, a new session token is generated for the user that claimed the workspace, but the previous session token for the prebuilds user was not expired. Any Coder workspace templates that persist this automatically generated session token are potentially impacted. This is fixed in versions 2.24.4 and 2.25.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/coder/coder/security/advisories/GHSA-j6xf-jwrj-v5qp - https://github.com/coder/coder/pull/19667 - https://github.com/coder/coder/
er/security/advisories/GHSA-j6xf-jwrj-v5qp - https://github.com/coder/coder/pull/19667 - https://github.com/coder/coder/pull/19668 - https://github.com/coder/coder/pull/19669 - https://github.com/coder/coder/commit/06cbb2890f453cd522bb2158a6549afa3419c276 - https://github.com/coder/coder/commit/20d67d7d7191a4fd5d36a61c6fc1e23ab59befc0 - https://github.com/coder/coder/commit/ec660907faa0b0eae20fa2ba58ce1733f5f4b35a
CVE ID: CVE-2025-58438 State: PUBLISHED Published: 2025-09-06T18:45:55.833Z Last Updated: 2025-11-03T18:13:54.480Z Vendors: jjjake Products: internetarchive Problem Types: CWE-22 Description: internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize user-supplied filenames or validate the final download path. A maliciously crafted filename could contain path traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would caus
traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would cause the file to be written outside of the intended target directory. An attacker could potentially overwrite critical system files or application configuration files, leading to a denial of service, privilege escalation, or remote code execution, depending on the context in which the library is used. The vulnerability is particularly critical for users on Windows systems, but all operating systems are affected. This issue is fixed in version 5.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jjjake/internetarchi
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/jjjake/internetarchive/security/advisories/GHSA-wx3r-v6h7-frjp - https://github.com/jjjake/internetarchive/commit/cba2d459e10a9489fb35caeba0b03e80f5f5d7c2 - https://github.com/jjjake/internetarchive/releases/tag/v5.5.1
CVE ID: CVE-2025-58439 State: PUBLISHED Published: 2025-09-06T00:30:26.689Z Last Updated: 2025-09-08T14:06:07.055Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: frappe Products: erpnext Problem Types: CWE-89 Description: ERP is a free and open source Enterprise Resource Planning tool. In versions below 14.89.2 and 15.0.0 through 15.75.1, lack of validation of parameters left certain endpoints vulnerable to error-based SQL Injection. Some information like version could be retrieved. This issue is fixed in versions 14.89.2 and 15.76.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/erpnext/security/advisories/GHSA-fv
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/frappe/erpnext/security/advisories/GHSA-fvjw-5w9q-6v39 - https://github.com/frappe/erpnext/pull/49219 - https://github.com/frappe/erpnext/pull/49220
CVE ID: CVE-2025-58440 State: REJECTED Published: N/A Last Updated: 2025-09-05T16:39:11.009Z Description: No description available.
CVE ID: CVE-2025-58442 State: PUBLISHED Published: 2025-09-09T19:46:45.798Z Last Updated: 2025-09-10T13:50:40.777Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: saleor Products: saleor Problem Types: CWE-204 Description: Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of `accountRegister` may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the issue. As a workaround, rate-limit the mutation to reduce the impact. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
rate-limit the mutation to reduce the impact. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/saleor/saleor/security/advisories/GHSA-8w67-mfm5-fwx5 - https://github.com/saleor/saleor/commit/09d671e91ea53a44352d5f685083dc05a2f55e95 - https://github.com/saleor/saleor/commit/b35783838e51cfc118e07d632f64b01bc3a2c4bb - https://github.com/saleor/saleor/releases/tag/3.21.16
CVE ID: CVE-2025-58443 State: PUBLISHED Published: 2025-09-06T20:04:25.442Z Last Updated: 2025-09-08T14:34:35.606Z Vendors: FOGProject Products: fogproject Problem Types: CWE-306, CWE-287 Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is expected to be released 9/15/2025. To address this vulnerability immediately, upgrade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned
rade to the latest version of either the dev-branch or working-1.6 branch. This will patch the issue for users concerned about immediate exposure. See the FOG Project documentation for step-by-step upgrade instructions: https://docs.fogproject.org/en/latest/install-fog-server#choosing-a-fog-version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FOGProject/fogproject/security/advisories/GHSA-mvwm-9m2h-87p9
CVE ID: CVE-2025-58444 State: PUBLISHED Published: 2025-09-08T21:24:58.821Z Last Updated: 2025-09-09T13:31:04.737Z Vendors: modelcontextprotocol Products: inspector Problem Types: CWE-84 Description: The MCP inspector is a developer tool for testing and debugging MCP servers. A cross-site scripting issue was reported in versions of the MCP Inspector local development tool prior to 0.16.6 when connecting to untrusted remote MCP servers with a malicious redirect URI. This could be leveraged to interact directly with the inspector proxy to trigger arbitrary command execution. Users are advised to update to 0.16.6 to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
Users are advised to update to 0.16.6 to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/modelcontextprotocol/inspector/security/advisories/GHSA-g9hg-qhmf-q45m - https://github.com/modelcontextprotocol/inspector/commit/650f3090d26344a672026b737d81586595bb1f60
CVE ID: CVE-2025-58445 State: PUBLISHED Published: 2025-09-06T19:47:33.669Z Last Updated: 2025-09-08T14:35:06.195Z Vendors: runatlantis Products: atlantis Problem Types: CWE-200 Description: Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known vulnerabilities associated with the specific versions, potentially compromising the service's security posture. This issue does not currently have a fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
osture. This issue does not currently have a fix. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/runatlantis/atlantis/security/advisories/GHSA-xh7v-965r-23f7
CVE ID: CVE-2025-58446 State: PUBLISHED Published: 2025-09-06T19:06:10.141Z Last Updated: 2025-09-08T17:55:13.537Z Vendors: mlc-ai Products: xgrammar Problem Types: CWE-770 Description: xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-9q5r-wfvf-rr7f - https://github.com/mlc-ai/xgrammar/commit/ced69c3ad2f8f61b516cc278a342e7c644383e27
CVE ID: CVE-2025-58447 State: PUBLISHED Published: 2025-09-09T22:11:03.376Z Last Updated: 2025-09-10T19:30:07.516Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: rathena Products: rathena Problem Types: CWE-122 Description: rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted `CA_SSO_LOGIN_REQ` with an oversized token length. This leads to immediate denial of service (crash) and it is possible to achieve remote code execution via heap corruption
his leads to immediate denial of service (crash) and it is possible to achieve remote code execution via heap corruption. Commit 2f5248b fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rathena/rathena/security/advisories/GHSA-4p33-6xqr-cm6x - https://github.com/rathena/rathena/commit/2f5248b9cd9a8c6b42422ddecfc4cc2cd0e69e4b
CVE ID: CVE-2025-58448 State: PUBLISHED Published: 2025-09-09T22:12:49.148Z Last Updated: 2025-09-10T19:29:20.032Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: rathena Products: rathena Problem Types: CWE-89 Description: rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rathena/rathena/security/advisories/GHSA-x99j-36m7-4vv7 - https://github.com/rathena/rathena/commit/0d89ae07
/github.com/rathena/rathena/security/advisories/GHSA-x99j-36m7-4vv7 - https://github.com/rathena/rathena/commit/0d89ae071ff5e46e8dedcf45d060acec84b3abb5
CVE ID: CVE-2025-58449 State: PUBLISHED Published: 2025-09-08T21:27:55.103Z Last Updated: 2025-09-09T13:30:56.695Z Vendors: MahoCommerce Products: maho Problem Types: CWE-646 Description: Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the `Dashboard` and `Catalog\Manage Products` permissions can create a custom option on a listing with a file input field. By allowing file uploads with a `.php` extension, the user can use the filed to upload malicious PHP files, gaining remote code execution. Version 25.9.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MahoCommerce/ma
9.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MahoCommerce/maho/security/advisories/GHSA-vgmm-27fc-vmgp - https://github.com/MahoCommerce/maho/commit/db54a1b44e9b3fd26b27ca4d5ece0af99c4dcb53
CVE ID: CVE-2025-58450 State: PUBLISHED Published: 2025-09-08T21:35:01.452Z Last Updated: 2025-09-09T13:30:44.306Z Vendors: prest Products: prest Problem Types: CWE-89 Description: pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98 - https://github.com/prest/prest/commit/47d02b878429
ps://github.com/prest/prest/security/advisories/GHSA-p46v-f2x8-qp98 - https://github.com/prest/prest/commit/47d02b87842900f77d76fc694d9aa7e983b0711c
CVE ID: CVE-2025-58451 State: PUBLISHED Published: 2025-09-08T22:07:48.516Z Last Updated: 2025-09-09T13:30:32.906Z Vendors: IEatUranium238 Products: Cattown Problem Types: CWE-1333, CWE-400 Description: Cattown is a JavaScript markdown parser. Versions prior to 1.0.2 used regular expressions with inefficient, potentially exponential worst-case complexity. This could cause excessive CPU usage due to excessive backtracking on crafted inputs. In turn, the excessive CPU usage could lead to resource exhaustion, where processing malicious inputs could cause high CPU or memory usage, potentially leading to denial of service. Version 1.0.2 contains a patch. Additionally, users should review and rest
ge, potentially leading to denial of service. Version 1.0.2 contains a patch. Additionally, users should review and restrict input sources if untrusted inputs are processed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IEatUranium238/Cattown/security/advisories/GHSA-455v-w7r9-3vv9 - https://github.com/IEatUranium238/Cattown/commit/70c2a28fb7dc520cfb7e401e0e141bff3dd26ead
CVE ID: CVE-2025-58452 State: PUBLISHED Published: 2025-09-08T22:26:24.115Z Last Updated: 2025-09-09T13:30:21.252Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-79 Description: WeGIA is a Web manager for charitable institutions. A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the listar_despachos.php endpoint of the WeGIA application prior to version 3.4.11. This vulnerability allows attackers to inject malicious scripts in the id_memorando parameter. Version 3.4.11 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-hq9x-mfv2-x467
CVE ID: CVE-2025-58453 State: PUBLISHED Published: 2025-09-08T22:28:40.515Z Last Updated: 2025-09-09T13:30:15.073Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior in the endpoint /WeGIA/html/memorando/exibe_anexo.php, in the id_anexo parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.11 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-gg48-pg
Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-gg48-pg9f-39fx
CVE ID: CVE-2025-58454 State: PUBLISHED Published: 2025-09-08T22:35:04.799Z Last Updated: 2025-09-09T13:29:54.619Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior inthe endpoint /WeGIA/html/memorando/listar_despachos.php, in the id_memorando parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. Version 3.4.11 contains a patch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-ghfh-g6rg-jmqf
CVE ID: CVE-2025-58456 State: PUBLISHED Published: 2025-10-23T22:05:14.379Z Last Updated: 2025-10-24T14:29:21.805Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: AutomationDirect Products: Productivity Suite, Productivity 3000 P3-622 CPU, Productivity 3000 P3-550E CPU, Productivity 3000 P3-530 CPU, Productivity 2000 P2-622 CPU, Productivity 2000 P2-550 CPU, Productivity 1000 P1-550 CPU, Productivity 1000 P1-540 CPU Problem Types: CWE-23 Description: A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC si
on 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01 - https://www.automationdirect.com/support/software-downloads - https://support.automationdirect.com/docs/securityconsiderations.pdf - https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json
CVE ID: CVE-2025-58457 State: PUBLISHED Published: 2025-09-24T09:29:35.824Z Last Updated: 2025-11-04T21:13:42.037Z Vendors: Apache Software Foundation Products: Apache ZooKeeper Problem Types: CWE-280 Description: Improper permission check in ZooKeeper AdminServer lets authorized clients to run snapshot and restore command with insufficient permissions. This issue affects Apache ZooKeeper: from 3.9.0 before 3.9.4. Users are recommended to upgrade to version 3.9.4, which fixes the issue. The issue can be mitigated by disabling both commands (via admin.snapshot.enabled and admin.restore.enabled), disabling the whole AdminServer interface (via admin.enableServer), or ensuring that the root ACL
min.restore.enabled), disabling the whole AdminServer interface (via admin.enableServer), or ensuring that the root ACL does not provide open permissions. (Note that ZooKeeper ACLs are not recursive, so this does not impact operations on child nodes besides notifications from recursive watches.) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/r5yol0kkhx2fzw22pxk1ozwm3oc6yxrx
CVE ID: CVE-2025-58458 State: PUBLISHED Published: 2025-09-03T15:02:26.231Z Last Updated: 2025-11-04T21:13:43.342Z Vendors: Jenkins Project Products: Jenkins Git client Plugin Description: In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2025-09-03/#SECURITY-3590