-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:git-client | maven | < 2.4.3 | 2.4.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from using File.createTempFile() without proper permission controls. The commit diff shows multiple instances where this insecure method was replaced with a new createTempFile() method that sets restrictive permissions (rw-------) and uses workspace-adjacent storage when available. Each identified function was modified in the patch to use the secure alternative, confirming they previously used vulnerable temporary file creation patterns. The functions handled sensitive operations like credential storage and Git operations, making them high-risk targets for information disclosure through temporary file interception.
A Semantic Attack on Google Gemini - Read the Latest Research