Executive brief
Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
Affected products
- Maven org.jenkins-ci.plugins:electricflow
Junglewise Threat Intelligence
CVE-2023-46654: Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
CVE-2023-46654 · Severity: low · CVSS 3.1 · Published 2023-10-25
Technologies: org.jenkins-ci.plugins:electricflow (Maven). Vendors: Maven.
Related threats
- Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
- Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation
- Jenkins ElectricFlow Plugin missing permission check
- Jenkins ElectricFlow Plugin is vulnerable to reflected cross site scripting vulnerability
- Jenkins ElectricFlow Plugin Missing permission checks