CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – 通过 @Grab 的 Jenkins Pipeline 共享库代码执行 程序代码（Groovy 流水线） root@kitploit: // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline 共享库远程代码执行 概述 Jenkins 流水线从并非完全可信的源加载共享库。该库使用 @Grab 注解下载外部 Maven 构件，其中可能包含恶意类，在 Groovy...

CVE-2020-14987

An issue was discovered in Bloomreach Experience Manager brXM 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code because there is a mishandling of the capability for administrators to write and run Groovy scripts within the updater editor. An attacker must use an AST...

PT-2019-11303 · Jenkins · Pipeline: Declarative Plugin +1

Name of the Vulnerable Software and Affected Versions: Pipeline: Declarative Plugin versions 1.3.3 and earlier Description: A sandbox bypass issue exists that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM by providing a pipeline script to an HTT...