CVE-2019-10418

2019-09-2516:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

CPENameOperatorVersion
kubernetes-pipeline-plugineqkubernetes-pipeline-project-1.6
kubernetes-pipeline-plugineqkubernetes-pipeline-project-1.5
kubernetes-pipeline-plugineqkubernetes-pipeline-project-1.3

Name	Operator	Version
kubernetes-pipeline-plugin	eq	kubernetes-pipeline-project-1.6
kubernetes-pipeline-plugin	eq	kubernetes-pipeline-project-1.5
kubernetes-pipeline-plugin	eq	kubernetes-pipeline-project-1.3