A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-2267.json"