The host is installed with Jenkins LTS before 2.138.2 or Jenkins rolling release before 2.146 and is prone to a remote code execution vulnerability. The flaw is present in the application, which fails to properly handle an issue in Stapler web framework. Successful exploitation allow attackers to obtain sensitive information through crafted URLs.