Jenkins Persona Plugin 2.4 and earlier allows users with Overall/Read permission to read arbitrary files on the Jenkins controller.
References:GSA_kwCzR0hTQS01bWZ3LXA2cXYtd2d2ds4AAmLB
Arbitrary file read vulnerability in Jenkins Persona Plugin
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:org.jenkins-ci.plugins:persona | <= 2.4 | No known fixed version | |
|
|
|||