Description
An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-569
Related Vulnerabilities
CVE-2022-43427 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-for-total-test
CVE-2021-46708 Vulnerability in npm package swagger-ui-dist
CVE-2019-0192 Vulnerability in maven package org.apache.solr:solr-core
CVE-2023-44483 Vulnerability in maven package org.apache.santuario:xmlsec
CVE-2021-21685 Vulnerability in maven package org.jenkins-ci.main:jenkins-core