description: Jenkins HTML Publisher Plugin 1.32 and earlier archives invalid symbolic links in report directories on agents and recreates them on the controller, allowing attackers with Item/Configure permission to determine whether a path on the Jenkins controller file system exists, without being able to access it.
affected:
{
vendor: Jenkins Project
product: Jenkins HTML Publisher Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 1.32, status: affected
defaultStatus: unaffected
}