Description
Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows.
Remediation
References
Related Vulnerabilities
OpenSSL Out-of-bounds Read Vulnerability (CVE-2017-3731)
OpenSSL Other Vulnerability (CVE-2005-1797)
WordPress Plugin Facebook-this Spam Links Injection (2.5)
Oracle Application Server CVE-2008-7234 Vulnerability (CVE-2008-7234)
Moodle Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-14322)