CVE-2016-4987: Jenkins Image Gallery

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields.

Affected products

• Jenkins Image Gallery: before 1.4 (fixed in 1.4)

Published 2017-02-09. Last modified 2026-06-17.