Jenkins Agent-to-Controller Compromise Data Compromise

The vulnerability of the agent-to-controller subsystem of the Jenkins automation server is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

kubectl cp Upload Malicious File

The vulnerability of the kubectl cp command, a management tool for clusters of virtual machines in Kubernetes, is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a malicious actor to download a malicious file remotely...