James Nord b8c9841c30 [SECURITY-167] Plugin manager was also vulnerable. ...

Although the plugiun manager was vulnerable getting information
out of Jenkins was harder - however it would still be possible to
do bad things such as reading from /dev/zero on Linux

2015-02-27 18:18:23 +00:00

..

hudson

[SECURITY-167] Plugin manager was also vulnerable.

2015-02-27 18:18:23 +00:00

jenkins

[SECURITY-162] Capture the root directory in VirtualFile.forFile and reject attempts to escape it.

2015-02-06 11:37:24 -05:00