Log Command vulnerabilities

1 known vulnerability in Log Command from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jenkins Log Command Plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-23904Jan 24, 2024Jenkins

  Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read content from arbitrary file