Description
An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.
Remediation
References
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2196
Related Vulnerabilities
CVE-2020-2120 Vulnerability in maven package org.jenkins-ci.plugins:fitnesse
CVE-2022-45146 Vulnerability in maven package org.bouncycastle:bc-fips
CVE-2009-2902 Vulnerability in maven package tomcat:catalina
CVE-2020-10686 Vulnerability in maven package org.keycloak:keycloak-model-jpa
CVE-2017-12619 Vulnerability in maven package org.apache.zeppelin:zeppelin