description: Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory during the cleanup process of the 'CloudBees CD - Publish Artifact' post-build step, allowing attackers able to configure jobs to delete arbitrary files on the Jenkins controller file system.
affected:
{
vendor: Jenkins Project
product: Jenkins CloudBees CD Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 1.1.32, status: affected
defaultStatus: unaffected
}