Description
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path.
Remediation
References
Related Vulnerabilities
MySQL Improper Input Validation Vulnerability (CVE-2017-3258)
Grafana Insufficiently Protected Credentials Vulnerability (CVE-2022-31130)
WordPress 4.1.x Directory Traversal (4.1 - 4.1.40)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.35)
WordPress Plugin Import any XML or CSV File to WordPress Cross-Site Scripting (3.4.5)