CyberRota Analysis
AI-GeneratedThe Jenkins Robot Framework Plugin versions 6.2.2 and earlier are vulnerable due to insufficient validation of the archive directory for report files, which can be manipulated by users with Item/Configure permissions. This flaw allows attackers to create or overwrite arbitrary files on the Jenkins controller, potentially leading to remote code execution. Organizations using this plugin should prioritize patching or upgrading to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content, which can lead to remote code execution.