Description
Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.
Remediation
References
https://lists.apache.org/thread/7ctchj24dofgsj9g1rg1245cms9myb34
Related Vulnerabilities
CVE-2021-21347 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2019-1003086 Vulnerability in maven package org.jenkins-ci.plugins:sinatra-chef-builder
CVE-2019-0205 Vulnerability in maven package org.webjars.bower:thrift
CVE-2021-21316 Vulnerability in npm package less-openui5
CVE-2023-37950 Vulnerability in maven package com.mabl.integration.jenkins:mabl-integration