GHSA-ffgg-vphh-v273
GitHub Security Advisory
Incomplete List of Disallowed Inputs in Jenkins
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Jenkins before versions 2.44 and 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
Affected Packages
Maven
org.jenkins-ci.main:jenkins-core
Affected versions:
0
(fixed in 2.32.2)
Maven
org.jenkins-ci.main:jenkins-core
Affected versions:
2.34
(fixed in 2.44)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.