CyberRota Analysis
AI-GeneratedThe Jenkins ThinBackup Plugin versions 2.1.4 and earlier are vulnerable to a configuration overwrite due to improper Stapler data binding, enabling attackers to redirect backup writes to a malicious directory and include arbitrary files from the Jenkins controller's file system in the backups. This vulnerability poses a significant risk of data exfiltration and unauthorized access to sensitive information. Organizations using this plugin should prioritize remediation to mitigate potential exploitation.
Original NVD Description
Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins controller file system in backups.