Jenkins Pipeline Shared Groovy Libraries Plugin Sandbox Bypass Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Pipeline Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier versions have a sandbox bypass vulnerability that stems from the plugin using the same working directory to detect all Pipeline libraries with the same name, regardless of the SCM used and the origin of the library configuration. An attacker could use this vulnerability to execute arbitrary code in the context of the Jenkins controller JVM via fine-grained SCM content.