Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin

2022-05-2416:56:46

Google

osv.dev

0.001 Low

EPSS

Percentile

42.9%

JSON

Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

CPENameOperatorVersion
io.fabric8.pipeline:kubernetes-pipeline-stepseq1.6
io.fabric8.pipeline:kubernetes-pipeline-stepseq1.3
io.fabric8.pipeline:kubernetes-pipeline-stepseq1.5

Name	Operator	Version
io.fabric8.pipeline:kubernetes-pipeline-steps	eq	1.6
io.fabric8.pipeline:kubernetes-pipeline-steps	eq	1.3
io.fabric8.pipeline:kubernetes-pipeline-steps	eq	1.5