Description
FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.5)
WordPress Plugin zM Ajax Login & Register Multiple Vulnerabilities (1.0.9)
WordPress Plugin Elementor Pro Cross-Site Scripting (2.0.9)
Drupal Core 8.9.x Cross-Site Scripting (8.9.0 - 8.9.19)
Oracle Application Server Other Vulnerability (CVE-2004-1774)