1 matches found
Restarting a run with revoked script approval allowed by pipeline-model-definition
pipeline-model-definition 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved. This allows attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer approved. NOT...
8CVSS7.6AI score0.00563EPSS
SaveExploits0Affected Software1
20