Description
Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates a temporary file in the system temporary directory with the default permissions for newly created files when installing a plugin from a URL, potentially allowing attackers with access to the system temporary directory to replace the file before it is installed in Jenkins, potentially resulting in arbitrary code execution.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple add pages or posts Cross-Site Request Forgery (1.6)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-2157)
WordPress Plugin HDW WordPress Video Gallery Multiple Cross-Site Scripting Vulnerabilities (1.2)
WordPress Plugin Pressbooks Textbook Cross-Site Scripting (1.2.5)