CVE-2023-32981 — Jenkins Project / Jenkins Pipeline Utility Steps Plugin

CVE-2023-32981

Jenkins Project / Jenkins Pipeline Utility Steps Plugin PUBLISHED

Description (CNA)

An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Pipeline Utility Steps Plugin	affected 0 through 2.15.2

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196

CISA-ADP

No English description supplied.

No references supplied.