(#Several vulnerabilities have been identified in plugins for Jenkins:#- CVE-2016-4986: path traversal in TAP due to an improper filtering of a parameter, leading to arbitrary files read on the file system##- CVE-2016-4987: path traversal in Image Gallery due to an improper validation of form fields, leading to arbitrary directories listing and files read on the file system##- CVE-2016-4988: reflected cross-site scripting in Build Failure Analyzer due to an improper filtering of a parameter, leading to arbitrary HTML or JavaScript code execution.)
