Vulnerabilities > CVE-2024-23899 - Unspecified vulnerability in Jenkins GIT Server 99.Va0826Abcdfad
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Jenkins Git server Plugin 99.va_0826a_b_cdfa_d and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing attackers with Overall/Read permission to read content from arbitrary files on the Jenkins controller file system.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |