Description
A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2002-1908)
WordPress Plugin O2Tweet Cross-Site Request Forgery (0.0.4)
WordPress Plugin Chat Cross-Site Scripting (1.0.8)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2021-4104)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0346)