Not rated
CVE-2020-2275 Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins…
Description
Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Copy data to workspace Plugin 1.0 | earliest → 1.0 | No fix stated |