Jenkins versions prior to 1.650 suffer from a java deserialization vulnerability. Continue reading...