Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2019/08/07 12:00 a.m.•21 views

Script sandbox bypass vulnerability in Simple Travis Pipeline Runner

Simple Travis Pipeline Runner defines a custom list of pre-approved signatures for scripts protected by the Script Security sandbox. This custom list of pre-approved signatures allows the use of methods that can be used to bypass Script Security sandbox protection. This results in arbitrary code...

8.8CVSS8.6AI score0.01765EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder