VYPR

Maven package

org.jvnet.hudson.plugins/copy-data-to-workspace-plugin

pkg:maven/org.jvnet.hudson.plugins/copy-data-to-workspace-plugin

Vulnerabilities (1)

  • CVE-2020-2275MedSep 16, 2020
    affected <= 1.0

    Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller.