Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hxpw-7x95-q38m

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

Jenkins Pipeline: Input Step Plugin

The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead.

Пакеты

Наименование

org.jenkins-ci.plugins:pipeline-input-step

maven
Затронутые версииВерсия исправления

< 2.7

2.7

EPSS

Процентиль: 25%
0.00085
Низкий

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
redhat
больше 8 лет назад

The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead.

CVSS3: 7.5
nvd
больше 8 лет назад

The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead.

EPSS

Процентиль: 25%
0.00085
Низкий

7.5 High

CVSS3

Дефекты

CWE-200