CVE-2016-4987

—

CVSS 3.1

6.5 medium

EPSS

3%p87

Published

Feb 9, 2017 (Feb 9, 2017)

Modified

Jun 17, 2026

Description

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.

Vendors: jenkins
Products: image gallery
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.