CVE-2018-1000148

The CVE-2018-1000148 entry concerns the Jenkins Copy To Slave Plugin, affected version 1.4.4 and earlier. The vulnerability is in CopyToSlaveBuildWrapper.java, enabling attackers with permissions to configure jobs to read arbitrary files from the Jenkins master filesystem. The connected sources c...