CVE-2016-3721
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
Published: 2016-05-17 · CVSS: 4.3 · CVSS 3.1
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7