What is CVE-2023-32981?

CVE-2023-32981 is a high-severity vulnerability in Jenkins Pipeline Utility Steps, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2023-05-16.

How severe is CVE-2023-32981?

High severity. CVSS v3 base score is 8.8 out of 10.

Buffer overflow in Jenkins Pipeline Utility Steps

CVE-2023-32981

An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.

Vulnerability class: Buffer Overflow

EPSS: 0.010 (60.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jenkins Pipeline_utility_steps
Jenkins Project Pipeline Utility Steps Plugin — versions 0

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

jenkinsci-cert@googlegroups.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32981?: CVE-2023-32981 is a high-severity vulnerability in Jenkins Pipeline Utility Steps, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2023-05-16.
How severe is CVE-2023-32981?: High severity. CVSS v3 base score is 8.8 out of 10.