CVE-2018-1000175

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-08 · updated 2026-06-17
Weakness: CWE-22

Description

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master.

Affected products

Jenkins Project Jenkins HTML Publisher Plugin: through 1.15

References

https://jenkins.io/security/advisory/2018-04-16/
https://jenkins.io/security/advisory/2018-04-16/

Get alerted when CVE-2018-1000175 or the next vulnerability affects your stack