Jenkins Pipeline Shared Groovy Libraries Plugin Arbitrary File Read Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Pipeline Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier versions have an arbitrary file read vulnerability that stems from sharing Groovy Libraries Plugin does not restrict the resource names passed to the libraryResource step. An attacker could use this vulnerability to configure pipeline permissions to read arbitrary files on the Jenkins controller file system.