1 matches found
Unsafe entry in Script Security list of approved signatures in workflow-remote-loader
workflow-remote-loader provides a custom list of pre-approved signatures for Script Security. Those entries apply to all scripts with sandbox protection, such as Pipeline. One entry provided here was unsafe, as it allowed invoking arbitrary methods, bypassing sandbox protection. The unsafe...
9.9CVSS6.8AI score0.01938EPSS
SaveExploits0Affected Software1
20