CVE-2023-32981

—

CVSS 3.1

8.8 high

EPSS

1%p61

Published

May 16, 2023 (May 16, 2023)

Modified

Jun 17, 2026

Description

An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.

Vendors: jenkins
Products: pipeline utility steps
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.