description: Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
affected:
{
product: Jenkins
vendor: Jenkins project
versions:
status: affected, version: 2.275
status: affected, version: LTS 2.263.2
}