Jenkins Tests Selector Plugin 1.3.3 and previous versions allows users with Item/Configure permission to read arbitrary files on the Jenkins controller.
jenkins tests selector