Описание
Inefficient Regular Expression Complexity in Jenkins Build Failure Analyzer Plugin
A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.
Пакеты
Наименование
com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer
maven
Затронутые версииВерсия исправления
< 1.24.2
1.24.2
Связанные уязвимости
CVSS3: 6.5
nvd
около 6 лет назад
A user-supplied regular expression in Jenkins Build Failure Analyzer Plugin 1.24.1 and earlier was processed in a way that wasn't interruptible, allowing attackers to have Jenkins evaluate a regular expression without the ability to interrupt this process.