Description
Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
Remediation
References
Related Vulnerabilities
Ruby Inadequate Encryption Strength Vulnerability (CVE-2021-32066)
WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.3)
WordPress Plugin FooBox Image Lightbox Cross-Site Scripting (1.0.4)
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.1)
Hesk Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3743)