GHSA-xcrr-x93h-rv4v
GitHub Security Advisory
Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system.
Affected Packages
Maven
org.jenkins-ci.plugins:scriptler
Affected versions:
0
(last affected: 342.v6a)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 4, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.