CVE-2024-28151

The Jenkins HTML Publisher Plugin (version 1.32 and earlier ) is vulnerable to a Path Traversal flaw. The root cause is the improper archiving of invalid symbolic links in report directories on agents and their subsequent recreation on the Jenkins controller. This oversight allows attackers with ...