Medium severity4.3NVD Advisory· Published Dec 10, 2018· Updated Jun 17, 2026
CVE-2018-1000862
CVE-2018-1000862
Description
An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.main:jenkins-coreMaven | < 2.138.4 | 2.138.4 |
org.jenkins-ci.main:jenkins-coreMaven | >= 2.140, < 2.154 | 2.154 |
Affected products
1Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/106176nvdThird Party AdvisoryVDB EntryWEB
- access.redhat.com/errata/RHBA-2019:0024nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-hph9-9vcq-f7gpghsaADVISORY
- jenkins.io/security/advisory/2018-12-05/nvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2018-1000862ghsaADVISORY
- github.com/jenkinsci/jenkins/commit/c19cc705688cfffa4fe735e0edbe84862b6c135fghsaWEB
News mentions
0No linked articles in our index yet.