Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xgjx-96v4-mqxx

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 7.3

Описание

Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

Пакеты

Наименование

org.jenkins-ci.plugins:script-security

maven
Затронутые версииВерсия исправления

< 1.18.1

1.18.1

EPSS

Процентиль: 16%
0.00051
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
почти 9 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

redhat
почти 10 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

CVSS3: 7.3
nvd
почти 9 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.

CVSS3: 7.3
debian
почти 9 лет назад

The Script Security plugin before 1.18.1 in Jenkins might allow remote ...

EPSS

Процентиль: 16%
0.00051
Низкий

7.3 High

CVSS3