{"id":"CVE-2023-32986","aliases":["EUVD-2023-1464","GHSA-46f2-x6h2-x9hx"],"status":"published","title":"Jenkins File Parameter Plugin arbitrary file write vulnerability","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.60683,"percentile":0.99155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2023-05-16T16:00:07Z","modified":"2026-06-17T05:59:59Z","fixes":[{"ecosystem":"Maven","package":"io.jenkins.plugins:file-parameters","fixed_in":["285.287.v4b"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.jenkins.plugins:file-parameters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"285.287.v4b"}]}]},{"source":"osv","ecosystem":"Maven","package":"io.jenkins.plugins:file-parameters","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"285.287.v4b"}]}],"versions":["110.vbe06c86f5235","146.v7d35212829d0","191.v35851c9e7a_5a_","205.vf6ce13b_e5dee","264.v1733d9b_2a_380","285.v757c5b_67a_c25","89.376eab01f493","90.71fea1303c13","91.096d3d7d175c","92.9c5d5a9ffc54","93.6ebaad75ae3b","99.102.vbc6a133bcbbb","99.fec41d2457a7"]}],"products":[{"vendor":"jenkins","product":"file_parameters"},{"vendor":"jenkins project","product":"jenkins file parameter plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3123","tags":["vendor-advisory","x_transferred","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32986","tags":["advisory"]},{"url":"https://github.com/jenkinsci/file-parameters-plugin/commit/4b7b29d3469dc020ec61a387c0c793c1f1ac31dd","tags":["web"]},{"url":"https://github.com/advisories/GHSA-46f2-x6h2-x9hx"}],"sources":{"cve":[{"id":"CVE-2023-32986","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.","status":"published","published":"2023-05-16T16:00:07.514Z","modified":"2025-01-23T20:29:53.246Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-1464","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.","status":"published","published":"2023-05-16T16:00:07Z","modified":"2025-01-23T20:29:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:14.026358Z"}],"ghsa":[{"id":"GHSA-46f2-x6h2-x9hx","title":"Jenkins File Parameter Plugin arbitrary file write vulnerability","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters.\n\nThis allows attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.\n\nFile Parameter Plugin 285.287.v4b_7b_29d3469d restricts the name (and resulting uploaded file name) of Stashed File Parameters.","status":"published","published":"2023-05-16T18:30:16Z","modified":"2024-01-04T12:12:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:37:29.411214Z"}],"nvd":[{"id":"CVE-2023-32986","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.","status":"published","published":"2023-05-16T16:15:11.147Z","modified":"2026-06-17T05:59:59.33Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:08:02.399327Z"}],"osv":[{"id":"GHSA-46f2-x6h2-x9hx","title":"Jenkins File Parameter Plugin arbitrary file write vulnerability","description":"Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters.\n\nThis allows attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.\n\nFile Parameter Plugin 285.287.v4b_7b_29d3469d restricts the name (and resulting uploaded file name) of Stashed File Parameters.","status":"published","published":"2023-05-16T18:30:16Z","modified":"2024-02-16T08:15:28.641092Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T15:46:36.434231Z"}]}}