Количество 3
Количество 3
CVE-2026-48921
Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem.
CVE-2026-48921
Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem.
GHSA-qjq3-wqj5-g37q
Jenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48921 Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. | CVSS3: 5.5 | 0% Низкий | 2 месяца назад |
 | CVE-2026-48921 Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content of a library used by a Pipeline job to read arbitrary files on the Jenkins controller filesystem. | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
| GHSA-qjq3-wqj5-g37q Jenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries | CVSS3: 7.5 | 0% Низкий | 2 месяца назад |
Уязвимостей на страницу