CVE-2019-10375

Description

An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.27

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-10375 are affected in Plugins - filesystem_scm 2.1	Windows
Vulnerabilities CVE-2019-10375 are affected in Plugins - filesystem_scm for Linux 2.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234