CVE-2023-46654 · Brief

CVEs like CVE-2023-46654

The records whose text reads closest to CVE-2023-46654, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-330010.780
   Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

2. CVE-2026-704270.770
   Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

3. CVE-2023-466550.908
   Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

4. CVE-2022-251760.761
   Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

5. CVE-2022-251790.765
   Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

6. CVE-2026-489210.760
   Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

7. CVE-2021-216860.768
   File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

8. CVE-2021-216020.780
   Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

9. CVE-2021-216950.776
   FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in…

   Same weakness class, CWE-59; same vendor or product family, Jenkins.

10. CVE-2022-251770.768
    Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations…

    Same weakness class, CWE-59; same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-30.