-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:htmlpublisher | maven | <= 1.15 | 1.16 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper sanitization of user-controlled report names when constructing directory paths. The advisory explicitly mentions HtmlPublisherTarget.java as the vulnerable component, and describes how non-alphanumeric characters (including path traversal sequences) weren't escaped in directory names prior to v1.16. The core vulnerability would exist in the code responsible for processing the report name parameter and using it to create filesystem paths, likely in methods handling report directory initialization or file copying operations.