Lucene search

K
osvGoogleOSV:GHSA-7FPG-PP3M-H22F
HistoryMay 17, 2022 - 3:53 a.m.

Jenkins allows attackers to execute arbitrary jobs

2022-05-1703:53:55
Google
osv.dev
5

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.3%

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

7.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.3%