GHSA-47rr-8vrp-9283
Arbitrary file read vulnerability in Jenkins File System SCM Plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | hudson.plugins.filesystem_scm:filesystem_scm | <= 2.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An arbitrary file read vulnerability in Jenkins File System SCM Plugin 2.1 and earlier allows attackers able to configure jobs in Jenkins to obtain the contents of any file on the Jenkins master.
References
External links from the advisory. They lead to third-party sites.