description: Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps.
affected:
{
product: Jenkins Continuous Integration with Toad Edge Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.3, status: affected, version: unspecified, versionType: custom
}