CVE-2024-54004 — Jenkins Project / Jenkins Filesystem List Parameter Plugin

CVE-2024-54004

Jenkins Project / Jenkins Filesystem List Parameter Plugin PUBLISHED

Description (CNA)

Jenkins Filesystem List Parameter Plugin 0.0.14 and earlier does not restrict the path used for the File system objects list Parameter, allowing attackers with Item/Configure permission to enumerate file names on the Jenkins controller file system.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Filesystem List Parameter Plugin	affected 0 through 0.0.14

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2024-11-27/#SECURITY-3367

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.