-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:wildfly-deployer | maven | <= 1.0.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper path validation when handling agent requests to read files. The WildFlyDeployerPlugin's deployment functionality (WildFlyDeployerPublisher) would be responsible for processing file paths during deployment. Since the advisory explicitly states agents can read arbitrary controller files, the perform method (common entry point for Jenkins plugin operations) is a strong candidate. The lack of path sanitization/validation here would directly enable traversal attacks. The confidence is high due to the plugin's purpose and the CWE-22/CWE-693 mapping.