Описание
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Ссылки
- Mailing ListThird Party Advisory
- Vendor Advisory
- Mailing ListThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.69 (включая)
cpe:2.3:a:jenkins:script_security:*:*:*:*:*:jenkins:*:*
EPSS
Процентиль: 79%
0.01291
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 8.8
redhat
почти 6 лет назад
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
CVSS3: 8.8
github
больше 3 лет назад
Improper Input Validation in Jenkins Script Security Plugin
EPSS
Процентиль: 79%
0.01291
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-20