From 554587b06db553ce35fa362d7a0b0aef33a57afb Mon Sep 17 00:00:00 2001 From: Kevin-CB Date: Thu, 23 Feb 2023 07:59:19 +0000 Subject: [PATCH] [SECURITY-3058] --- core/src/main/java/hudson/model/FileParameterDefinition.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/core/src/main/java/hudson/model/FileParameterDefinition.java b/core/src/main/java/hudson/model/FileParameterDefinition.java index 4cfb35fca1..343dd58312 100644 --- a/core/src/main/java/hudson/model/FileParameterDefinition.java +++ b/core/src/main/java/hudson/model/FileParameterDefinition.java @@ -31,6 +31,7 @@ import hudson.Extension; import hudson.cli.CLICommand; import java.io.File; import java.io.IOException; +import java.nio.file.Files; import java.util.Objects; import javax.servlet.ServletException; import net.sf.json.JSONObject; @@ -118,7 +119,7 @@ public class FileParameterDefinition extends ParameterDefinition { @Override public ParameterValue createValue(CLICommand command, String value) throws IOException, InterruptedException { // capture the file to the server - File local = File.createTempFile("jenkins", "parameter"); + File local = Files.createTempFile("jenkins", "parameter").toFile(); String name; if (value.isEmpty()) { FileUtils.copyInputStreamToFile(command.stdin, local);