CVSS 3.0
6.5 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2018-1000175
Medium (6.5) in jenkins html publisher. EPSS 2.7% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:htmlpublisher 1.16.
A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.
Severity
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:html_publisher
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-4x63-3p7q-xmh7 | Maven | org.jenkins-ci.plugins:htmlpublisher | <1.16 | 1.16 |