1 matches found
jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)
The jenkins-plugin-script-security improperly whitelisted "DefaultGroovyMethods.putAtObject, String, Object" and "DefaultGroovyMethods.getAtObject, String" which allows attackers to bypass many restrictions and potentially trigger builds or access data they should not have access to. Exploitation...
6.5CVSS6.7AI score0.00818EPSS
SaveExploits0References5
20