Jenkins CVE-2016-0792 Deserialization Remote Exploit

What is CVE-2016-0792? Multiple unspecified API endpoints in Jenkins before 1.650 and LTS before 1.642.2 allow remote authenticated users to execute arbitrary code via serialized data in an XML file,...