Servers and applications
CVE-2023-27903
Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.
- Severity
- Medium 4.4
- Published
- 10 Mar 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.375.4, 2.394
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
JenkinsServers and applications · cpe:a:jenkins:jenkins |
|