CVE-2021-21691 (jenkins)
Creating symbolic links is possible without the 'symlink' agent-to-controller access…
Creating symbolic links is possible without the 'symlink' agent-to-controller access…
Creating symbolic links is possible without the 'symlink' agent-to-controller access…
Agent processes are able to completely bypass file path filtering…
FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access…
FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access…
The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier,…
File path filters in the agent-to-controller security subsystem of Jenkins…
File path filters in the agent-to-controller security subsystem of Jenkins…