Lucene search
+L

1441 matches found

OSV
OSV
added 2022/10/19 7:0 p.m.32 views

GHSA-7QW2-H9GJ-HCVH Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

Pipeline: Groovy Libraries Plugin and older releases of the Pipeline: Deprecated Groovy Libraries Plugin formerly Pipeline: Shared Groovy Libraries Plugin define the library Pipeline step, which allows Pipeline authors to dynamically load Pipeline libraries. The return value of this step can be...

8.8CVSS9.6AI score0.0114EPSS
SaveExploits0References3
OSV
OSV
added 2022/10/19 7:0 p.m.23 views

GHSA-4HJJ-9GP7-4FRG Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin

Pipeline: Groovy Libraries Plugin and older releases of the Pipeline: Deprecated Groovy Libraries Plugin formerly Pipeline: Shared Groovy Libraries Plugin define the library Pipeline step, which allows Pipeline authors to dynamically load Pipeline libraries. The return value of this step can be...

8.8CVSS9.6AI score0.01209EPSS
SaveExploits0References3
OSV
OSV
added 2022/10/19 7:0 p.m.46 views

GHSA-MQC2-W9R8-MMXM Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

9.9CVSS9.6AI score0.01208EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/10/19 7:0 p.m.53 views

Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

9.9CVSS9.3AI score0.01208EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/10/19 7:0 p.m.30 views

Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin

Pipeline: Groovy Libraries Plugin and older releases of the Pipeline: Deprecated Groovy Libraries Plugin formerly Pipeline: Shared Groovy Libraries Plugin define the library Pipeline step, which allows Pipeline authors to dynamically load Pipeline libraries. The return value of this step can be...

9.9CVSS9.2AI score0.0114EPSS
SaveExploits0References4Affected Software2
Github Security Blog
Github Security Blog
added 2022/10/19 7:0 p.m.34 views

Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin

Pipeline: Groovy Libraries Plugin and older releases of the Pipeline: Deprecated Groovy Libraries Plugin formerly Pipeline: Shared Groovy Libraries Plugin define the library Pipeline step, which allows Pipeline authors to dynamically load Pipeline libraries. The return value of this step can be...

9.9CVSS9.2AI score0.01209EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/10/19 4:15 p.m.4 views

CVE-2022-43406

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute...

9.9CVSS6AI score0.0114EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/19 4:15 p.m.3 views

CVE-2022-43406

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute...

9.9CVSS6.1AI score0.0114EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/10/19 4:15 p.m.4 views

CVE-2022-43405

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary co...

9.9CVSS6.1AI score0.01209EPSS
SaveExploits0References4
NVD
NVD
added 2022/10/19 4:15 p.m.28 views

CVE-2022-43401

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b0b0aa451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a...

9.9CVSS0.01261EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/19 4:15 p.m.6 views

CVE-2022-43402

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

9.9CVSS6AI score
SaveExploits0References2
NVD
NVD
added 2022/10/19 4:15 p.m.32 views

CVE-2022-43402

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

9.9CVSS0.01208EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/19 4:15 p.m.6 views

CVE-2022-43402

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

9.9CVSS6.1AI score0.01208EPSS
SaveExploits0References4
OSV
OSV
added 2022/10/19 4:15 p.m.5 views

CVE-2022-43405

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary co...

9.9CVSS6AI score0.01209EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/19 4:15 p.m.17 views

CVE-2022-43405

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary co...

9.9CVSS0.01209EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/19 4:15 p.m.21 views

Security feature bypass

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute...

6.5CVSS9.6AI score0.0114EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/19 4:15 p.m.31 views

Security feature bypass

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea628154bc2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection...

6.5CVSS9.5AI score0.01208EPSS
SaveExploits0References2
Prion
Prion
added 2022/10/19 4:15 p.m.41 views

Security feature bypass

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b0b0aa451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a...

6.5CVSS9.5AI score0.01261EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/10/19 4:15 p.m.22 views

Security feature bypass

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary co...

6.5CVSS9.6AI score0.01209EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/19 4:15 p.m.3 views

CVE-2022-43401

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b0b0aa451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection a...

9.9CVSS6.1AI score0.01261EPSS
SaveExploits0References4
Rows per page
Query Builder