Jenkins Subversion Plugin Path Traversal Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Subversion Plugin in version 2.15.0 and earlier has a path traversal vulnerability that stems from the fact that Jenkins Subversion Plugin does not restrict the file name when looking up a controller from an agent on subversion key file from the agent without restricting the filename. An attacker could exploit this vulnerability to obtain sensitive information.