Loading HuntDB...

GHSA-85wg-cg5p-m76p

GitHub Security Advisory

Arbitrary file read vulnerability in Jenkins Storable Configs Plugin

✓ GitHub Reviewed MODERATE Has CVE

Advisory Details

Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller.

Affected Packages

Maven org.jvnet.hudson.plugins:storable-configs-plugin
Affected versions: 0 (last affected: 1.0)

Related CVEs

Key Information

GHSA ID
GHSA-85wg-cg5p-m76p
Published
May 24, 2022 5:28 PM
Last Modified
October 27, 2023 2:06 PM
CVSS Score
5.0 /10
Primary Ecosystem
Maven
Primary Package
org.jvnet.hudson.plugins:storable-configs-plugin
GitHub Reviewed
✓ Yes

Dataset

Last updated: August 25, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.