CVE-2022-25204

Name of the Vulnerable Software and Affected Versions Jenkins Doktor Plugin version 0.4.1 and earlier

Description The issue allows attackers who can control agent processes to determine whether a file with a given name exists on the controller, by exploiting the functionality that renders files as Markdown or Asciidoc and analyzing error messages.

Recommendations For Jenkins Doktor Plugin version 0.4.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.