PT-2026-73344 · Bitnami · Jenkins
Published
2026-08-17
·
Updated
2026-08-17
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Jenkins