Description
When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-3810)
WordPress Plugin WP-Forum 'sendmail.php' SQL Injection (1.7.8)
WordPress Plugin WP eCommerce 'wpsc-transaction_results_functions.php' SQL Injection (3.8.7.5)
MySQL CVE-2012-0496 Vulnerability (CVE-2012-0496)
WordPress Plugin Wechat Broadcast Local/Remote File Inclusion (1.2.0)