Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21615.json"