96 matches found
EUVD-2022-2891
Malicious code in bioql PyPI...
EUVD-2022-3365
Malicious code in bioql PyPI...
EUVD-2022-2227
Malicious code in bioql PyPI...
EUVD-2022-4918
Malicious code in bioql PyPI...
EUVD-2022-7052
Malicious code in bioql PyPI...
EUVD-2022-5034
Malicious code in bioql PyPI...
EUVD-2022-4221
Malicious code in bioql PyPI...
EUVD-2022-2690
Malicious code in bioql PyPI...
EUVD-2022-6986
Malicious code in bioql PyPI...
EUVD-2022-4680
Malicious code in bioql PyPI...
EUVD-2022-5137
Malicious code in bioql PyPI...
EUVD-2022-5684
Malicious code in bioql PyPI...
EUVD-2022-7088
Malicious code in bioql PyPI...
EUVD-2022-5037
Malicious code in bioql PyPI...
jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability
A flaw was found in the Jenkins Script Security Plugin. This vulnerability allows attackers with Overall/Read permission to check for the existence of files on the controller file system via a method that implements form validation that does not perform a permission check...
CVE-2024-52549
A flaw was found in the Jenkins Script Security Plugin. This vulnerability allows attackers with Overall/Read permission to check for the existence of files on the controller file system via a method that implements form validation that does not perform a permission check. Mitigation Mitigation f...
CVE-2024-52549
Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va3bb89f8a95b and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the...
CVE-2024-52549
Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va3bb89f8a95b and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the...
CVE-2024-52549
CVE-2024-52549 affects Jenkins Script Security Plugin (1367.vdf2fc45f229c and earlier, with exceptions 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776). The issue is a missing permission check in a form-validation method, allowing attackers with Overall/Read permission to determine wheth...
jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies
A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin involving crafted constructor bodies, enabling the circumvention of security restrictions. With crafted constructor bodies, this flaw allows authenticated attackers to define and execute sandboxed scripts, including...