{"id":"CVE-2018-1000997","published":"2019-01-23T22:00:00Z","modified":"2024-09-17T01:26:09Z","title":"A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and…","vendor":null,"product":null,"tier":"tail","description":{"text":"A path traversal vulnerability exists in the Stapler web framework used by Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/org/kohsuke/stapler/Facet.java, groovy/src/main/java/org/kohsuke/stapler/jelly/groovy/GroovyFacet.java, jelly/src/main/java/org/kohsuke/stapler/jelly/JellyFacet.java, jruby/src/main/java/org/kohsuke/stapler/jelly/jruby/JRubyFacet.java, jsp/src/main/java/org/kohsuke/stapler/jsp/JSPFacet.java that allows attackers to render routable objects using any view in Jenkins, exposing internal information about those objects not intended to be viewed, such as their toString() representation.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.03256,"percentile":0.8831,"provenance":"source"},"cwes":[],"references":[{"url":"https://jenkins.io/security/advisory/2018-10-10/#SECURITY-867","tags":["x_refsource_CONFIRM"]}],"priority":{"score":17.7,"factors":[{"name":"EPSS percentile","points":17.66}]},"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.main:jenkins-core","vulnerableRanges":["<2.138.2",">=2.140, <2.146"],"patched":["2.138.2","2.146"],"from":["GHSA-5hfp-964w-5vgm"],"provenance":"source"},{"ecosystem":"Maven","package":"org.kohsuke.stapler:stapler-parent","vulnerableRanges":["<1.250.2"],"patched":["1.250.2"],"from":["GHSA-5hfp-964w-5vgm"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2595","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-jenkins-cve-2013-0158","children":[{"from":"CVE-2018-1000997","to":"CVE-2019-10354","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.kohsuke.stapler:stapler-parent","fromFixed":"1.250.2","toFixed":"1.257.1","daysApart":175},{"kind":"same-code","provenance":"machine","files":["core/src/main/java/org/kohsuke/stapler/Facet.java","groovy/src/main/java/org/kohsuke/stapler/jelly/groovy/GroovyFacet.java","jelly/src/main/java/org/kohsuke/stapler/jelly/JellyFacet.java"],"commits":["https://github.com/jenkinsci/stapler/commit/0dfc28aa2102a59638484fc11c4c53b1dbb2baf0","https://github.com/jenkinsci/stapler/commit/19637555a9f32d3875356b47234131d8b1e9fee4"],"basis":"shared function","functions":["createRequestDispatcher","discoverExtensions"]}]}],"packageHistory":[{"cve":"CVE-2018-1999007","published":"2018-07-23","fixed":"1.250.1","kev":false,"link":{"from":"CVE-2018-1999007","to":"CVE-2018-1000997","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.kohsuke.stapler:stapler-parent","fromFixed":"1.250.1","toFixed":"1.250.2","daysApart":184},{"kind":"similar","provenance":"machine","score":0.49,"basis":"same package + description similarity"}]}},{"cve":"CVE-2018-1000997","published":"2019-01-23","fixed":"1.250.2","kev":false},{"cve":"CVE-2019-10354","published":"2019-07-17","fixed":"1.257.1","kev":false}],"package":"Maven:org.kohsuke.stapler:stapler-parent"}}