CVE-2023-41932
Assigner: jenkins
Published: 2023-09-06T12:08:53.687Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Jenkins Job Configuration History Plugin
vendor: Jenkins Project
versions: lessThanOrEqual: 1227.v7a_79fc4dc01f
status: affected
version: 0
versionType: maven
descriptions: value: Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.