Redpen Pipeline Reporter For Jira
Monthly
Authenticated path traversal in the Jenkins Redpen - Pipeline Reporter for Jira plugin (1.054.v7b_9517b_6b_202 and earlier) allows a user holding Item/Configure permission to read files from the Jenkins controller workspace directory when the plugin uploads build artifacts to Jira. Because the plugin fails to correctly validate the workspace path, the file being attached to a Jira issue can be resolved outside the intended build workspace, exposing controller-side files to anyone who can configure a job. No public exploit code has been identified at time of analysis, there is no indication of active exploitation, and the EPSS score is low at 0.34% (26th percentile), so this is a moderate-to-low priority issue whose risk is driven mainly by the privileged permission required of the attacker.
Authenticated path traversal in the Jenkins Redpen - Pipeline Reporter for Jira plugin (1.054.v7b_9517b_6b_202 and earlier) allows a user holding Item/Configure permission to read files from the Jenkins controller workspace directory when the plugin uploads build artifacts to Jira. Because the plugin fails to correctly validate the workspace path, the file being attached to a Jira issue can be resolved outside the intended build workspace, exposing controller-side files to anyone who can configure a job. No public exploit code has been identified at time of analysis, there is no indication of active exploitation, and the EPSS score is low at 0.34% (26th percentile), so this is a moderate-to-low priority issue whose risk is driven mainly by the privileged permission required of the attacker.