Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/05/13 1:15 a.m.41 views

Jenkins Groovy Plugin sandbox bypass vulnerability

Jenkins Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as @Grab to source code elements. Both the pipeline validation REST APIs and actual script/pipeline execution are affected. This allowed users with...

8.8CVSS7.7AI score0.86224EPSS
SaveExploits11References11Affected Software3
Rows per page
Query Builder