CVE-2019-10352: Path Traversal
A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.
Other sources
A path traversal vulnerability in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java allowed attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.
— MITRE
A vulnerability was found in Jenkins versions weekly before 2.186 and LTS before 2.176.2. Users with Job/Configure permission could specify a relative path escaping the base directory in the file name portion of a file parameter definition. This path would be used to store the uploaded file on the Jenkins master, resulting in an arbitrary file write vulnerability. This vulnerability is the result of an incomplete fix for SECURITY-1074. File parameters that escape the base directory are no longer accepted and the build will fail.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-10352?
CVE-2019-10352 has a medium severity rating due to the potential for arbitrary file access.
How do I fix CVE-2019-10352?
To fix CVE-2019-10352, update Jenkins to version 2.186 or later, or to Jenkins LTS version 2.176.2 or later.
What versions are affected by CVE-2019-10352?
CVE-2019-10352 affects Jenkins versions 2.185 and earlier, as well as Jenkins LTS versions 2.176.1 and earlier.
Who can exploit CVE-2019-10352?
Attackers with Job/Configure permission in Jenkins can exploit CVE-2019-10352 to define a file parameter with an unintended file name.
What is the main impact of CVE-2019-10352?
The main impact of CVE-2019-10352 is that it allows attackers to access files outside the intended directory, leading to potential data leakage.