CVE-2023-46654

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitrary files on the Jenkins controller file system.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
Jenkins Project	Jenkins CloudBees CD Plugin	<= 1.1.32

References

http://www.openwall.com/lists/oss-security/2023/10/25/2Mailing List, Third Party Advisory
https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3237Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/10/25/2Mailing List, Third Party Advisory
https://www.jenkins.io/security/advisory/2023-10-25/#SECURITY-3237Vendor Advisory

Timeline

Published: Oct 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-466556.5Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are publish CVE-2023-466565.3Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when checking whether the pro CVE-2023-466575.3Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook CVE-2023-466585.3Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whether the provided and CVE-2023-466595.4Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a stored cross-site scrip CVE-2023-46669.8The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allow CVE-2023-466605.3Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided and expected webhook t CVE-2023-466619.8Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.CVE-2023-466627.5Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated r CVE-2023-466638.1Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application inte CVE-2023-466649.1Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on CVE-2023-466659.8Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying passwords in a POST request and gain