Description
An arbitrary file write vulnerability in Jenkins Cobertura Plugin 1.15 and earlier allows attackers able to control the coverage report file contents to overwrite any file on the Jenkins master file system.
Remediation
References
http://www.openwall.com/lists/oss-security/2020/03/09/1
https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1668
Related Vulnerabilities
CVE-2018-17244 Vulnerability in maven package org.elasticsearch:elasticsearch
CVE-2017-1000189 Vulnerability in maven package org.webjars.npm:ejs
CVE-2023-3635 Vulnerability in maven package com.squareup.okio:okio
CVE-2016-10744 Vulnerability in maven package org.webjars:select2
CVE-2023-43495 Vulnerability in maven package org.jenkins-ci.main:jenkins-core