Lucene search

K
osvGoogleOSV:GHSA-5532-PRRF-RF5X
HistoryMay 13, 2022 - 1:41 a.m.

Arbitrary code execution vulnerability in Jenkins Speaks! Plugin

2022-05-1301:41:14
Google
osv.dev
3
jenkins
speaks! plugin
arbitrary code execution
vulnerability
groovy code
jvm
privileges
software

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.8%

Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts.

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.8%

Related for OSV:GHSA-5532-PRRF-RF5X