org.jvnet.hudson.main:hudson-test-harness (1.377), org.jvnet.hudson.main:hudson-war (1.377) +8 more potentially affected by CVE-2015-8031 via org.jvnet.hudson.main:hudson-core (1.377)

org.jvnet.hudson.main:hudson-core MAVEN version 1.377 is affected by a known vulnerability. The following packages have a transitive dependency on org.jvnet.hudson.main:hudson-core and may be impacted: - org.jvnet.hudson.main:hudson-test-harness 1.377 - org.jvnet.hudson.main:hudson-war 1.377 -...

Arbitrary Code Execution Via Bypassing Permission Check

distfork is vulnerable to arbitrary code execution via bypassing permission check. The bypass is possible because it only performs basic permission overall/read checks and allows anyone with that permission to execute arbitrary shell commands on all connected nodes...