vulnerability

Jenkins Advisory 2024-11-27: CVE-2024-54004: Path traversal vulnerability in Filesystem List Parameter Plugin

Try Surface Command
Back to search
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Nov 28, 2024
Added
Nov 28, 2024
Modified
Aug 11, 2025

Description

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.

Solutions

jenkins-lts-upgrade-2_479_2jenkins-upgrade-2_487

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today