Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Jenkins Persona Plugin 2.4 and earlier allows users with Overall/Read permission to read arbitrary files on the Jenkins controller.
Advisories for Maven/Org.jenkins-Ci.plugins/Persona package
2022