Lucene search

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

🗓️ 19 Oct 2022 19:21:00Reported by GitHub Advisory DatabaseType

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin allows bypassing sandbox protection and executing arbitrary cod

Reporter	Title	Published	Views	Family All 24
RedhatCVE	CVE-2022-43406	20 Oct 202206:17	–	redhatcve
Cvelist	CVE-2022-43406	19 Oct 202200:00	–	cvelist
NVD	CVE-2022-43406	19 Oct 202216:15	–	nvd
OSV	Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin	19 Oct 202219:00	–	osv
OSV	Red Hat Security Advisory: OpenShift Developer Tools and Services for OCP 4.12 security update	20 Sep 202414:21	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update	30 Sep 202407:06	–	osv
OSV	Red Hat Security Advisory: jenkins and jenkins-2-plugins security update	30 Sep 202416:32	–	osv
OSV	Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update	30 Sep 202416:31	–	osv
Prion	Security feature bypass	19 Oct 202216:15	–	prion
Veracode	Arbitrary Code Execution	7 Mar 202300:49	–	veracode

Vulners

Node

io.jenkins.plugins pipeline-groovy-libRange≤612.v84da

org.jenkins-ci.plugins.workflow workflow-cps-global-libRange<588.v576c103a

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-43406
jenkins	www.jenkins.io/security/advisory/2022-10-19/
openwall	www.openwall.com/lists/oss-security/2022/10/19/3
github	www.github.com/advisories/GHSA-7qw2-h9gj-hcvh

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Oct 2022 19:00Current

9.2High risk

Vulners AI Score9.2

EPSS0.001

CWE-693