Lucene search
K

9 matches found

GithubExploit
GithubExploit
added 2024/06/06 2:27 p.m.324 views

Exploit for Improper Initialization in Linux Linux_Kernel

!Dirty Pipehttps://miro.medium.com/v2/resize:fit:1400/1G1ov2...

7.8CVSS7.9AI score0.81981EPSS
Exploits99
OSV
OSV
added 2022/05/24 5:8 p.m.0 views

GHSA-QVMF-36H5-3F5V Improper Input Validation in Jenkins Script Security Plugin

Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations...

8.8CVSS5.9AI score0.00704EPSS
Exploits0References4
OSV
OSV
added 2022/05/13 1:15 a.m.4 views

GHSA-6Q78-6XVR-26FG Jenkins Groovy Plugin sandbox bypass vulnerability

Jenkins Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as @Grab to source code elements. Both the pipeline validation REST APIs and actual script/pipeline execution are affected. This allowed users with...

8.8CVSS7.3AI score0.93935EPSS
Exploits9References10
RedHat Linux
RedHat Linux
added 2020/09/09 3:23 p.m.1 views

jenkins-script-security-plugin: sandbox protection bypass during script compilation phase by applying AST transforming annotations

Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations...

8.8CVSS5.8AI score0.00704EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/06/29 2:37 p.m.2 views

jenkins-script-security-plugin: sandbox protection bypass during script compilation phase by applying AST transforming annotations

Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations...

8.8CVSS5.8AI score0.00704EPSS
Exploits0References5
Veracode
Veracode
added 2020/06/19 3:53 a.m.20 views

Remote Code Execution (RCE)

jenkins-script-security-plugin is vulnerabl to sandbox protection bypass during script compilation phase by applying AST transforming annotations...

8.8CVSS2.4AI score0.00704EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2020/02/12 12:0 a.m.2 views

PT-2020-15317 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.69 and earlier Description: The issue allows sandbox protection to be circumvented during the script compilation phase. This can be achieved by applying AST transforming annotations to imports or by...

8.8CVSS8.6AI score0.00704EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2019/02/20 2:11 p.m.10 views

jenkins-plugin-workflow-cps: Sandbox Bypass in Pipeline: Groovy Plugin

A flaw was found in Jenkins Pipeline. In the Declarative plugin, the script sandbox protection could be circumvented during the script compilation phase by applying AST. Both the pipeline validation REST APIs and the actual script/pipeline execution are affected. This allows users with Overall/Re...

8.8CVSS7AI score0.93935EPSS
Exploits9References5
RedHat Linux
RedHat Linux
added 2019/02/20 2:11 p.m.2 views

jenkins-plugin-pipeline-model-definition: Sandbox Bypass in Pipeline: Declarative

A flaw was found in Jenkins Pipeline. Script Security sandbox protection could be circumvented during the script compilation phase by applying AST transforming annotations such as @Grab to source code elements. This allows users with Overall/Read permission, or able to control Jenkinsfile or...

8.8CVSS7AI score0.93454EPSS
Exploits9References5
Rows per page
Query Builder