io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

org.jenkins-ci.plugins:gradle (2.12.0.1) potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1138.v8e727069a_025)

org.jenkins-ci.plugins:script-security MAVEN version 1138.v8e727069a025 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle 2.12.0.1 Source cves: CVE-2022-43401...

org.jenkins-ci.plugins:gradle (>=1.37.1, <=1.40) potentially affected by CVE-2022-43403 via org.jenkins-ci.plugins:script-security (1.64)

org.jenkins-ci.plugins:script-security MAVEN version 1.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle =1.37.1, =1.40 Source cves: CVE-2022-43403 Source...

org.jenkins-ci.plugins:gradle (>=1.37.1, <=1.40) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.64)

org.jenkins-ci.plugins:script-security MAVEN version 1.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle =1.37.1, =1.40 Source cves: CVE-2022-43404 Source...

com.geteasyqa:easyqa (1.0), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +15 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.27)

org.jenkins-ci.plugins:script-security MAVEN version 1.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.geteasyqa:easyqa 1.0 - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.5.0, =1.5.0,...

de.tracetronic.jenkins.plugins:ecu-test-execution (>=3.0, <=3.4), jp.ikedam.jenkins.plugins:extensible-choice-parameter (1.8.1) potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1158.v7c1b_73a_69a_08)

org.jenkins-ci.plugins:script-security MAVEN version 1158.v7c1b73a69a08 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.tracetronic.jenkins.plugins:ecu-test-execution =3.0, =3.4 -...

com.testinium.jenkins:testinium (1.0), me.vickychijwani.jenkins:labelled-steps (1.0) +29 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.25)

org.jenkins-ci.plugins:script-security MAVEN version 1.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.testinium.jenkins:testinium 1.0 - me.vickychijwani.jenkins:labelled-steps 1.0 -...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2022-43404 Source...

io.fabric8.pipeline:kubernetes-pipeline-aggregator (1.3), io.fabric8.pipeline:kubernetes-pipeline-core (1.3) +6 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.14)

org.jenkins-ci.plugins:script-security MAVEN version 1.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.fabric8.pipeline:kubernetes-pipeline-aggregator 1.3 -...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.42)

org.jenkins-ci.plugins:script-security MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.1 Source cves: CVE-2022-43404 Sour...

org.jenkins-ci.plugins:templating-engine (>=1.6, <=2.1) potentially affected by CVE-2022-43403 via org.jenkins-ci.plugins:script-security (1.42)

org.jenkins-ci.plugins:script-security MAVEN version 1.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:templating-engine =1.6, =2.1 Source cves: CVE-2022-43403 Sour...

io.jenkins.blueocean:blueocean (>=1.0.0-b18, <=1.0.0-b21), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b18, <=1.0.0-b21) +13 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.23)

org.jenkins-ci.plugins:script-security MAVEN version 1.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b18, =1.0.0-b18, =1.0.0-b18, =1.0.0-b18,...

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin

Script Security Plugin provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are generally safe to execute. Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call is to be...

io.jenkins.plugins:synopsys-sigma (>=2021.12.0, <=2022.1.0) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.71)

org.jenkins-ci.plugins:script-security MAVEN version 1.71 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:synopsys-sigma =2021.12.0, =2022.1.0 Source cves: CVE-2022-43404...

org.biouno:uno-choice (1.5-alpha-1), org.jenkins-ci.plugins:ansible-tower (>=0.5.0, <=0.12.0) +7 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.17)

org.jenkins-ci.plugins:script-security MAVEN version 1.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.biouno:uno-choice 1.5-alpha-1 - org.jenkins-ci.plugins:ansible-tower =0.5.0, =1....

io.jenkins.blueocean:blueocean (1.2.0-beta-1), io.jenkins.blueocean:blueocean-events (1.2.0-beta-1) +9 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.29)

org.jenkins-ci.plugins:script-security MAVEN version 1.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.blueocean:blueocean 1.2.0-beta-1 - io.jenkins.blueocean:blueocean-events...

io.jenkins.plugins:aws-sam (>=1.2.7, <=1.2.13) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.53)

org.jenkins-ci.plugins:script-security MAVEN version 1.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:aws-sam =1.2.7, =1.2.13 Source cves: CVE-2022-43404 Source...

org.jenkins-ci.plugins:ant-in-workspace (1.2.2), org.jenkins-ci.plugins:applitools-eyes (>=1.14, <=1.15.1) +1 more potentially affected by CVE-2022-43401 via org.jenkins-ci.plugins:script-security (1.75)

org.jenkins-ci.plugins:script-security MAVEN version 1.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:ant-in-workspace 1.2.2 - org.jenkins-ci.plugins:applitools-ey...

org.jenkins-ci.plugins:gradle (2.12.0.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1138.v8e727069a_025)

org.jenkins-ci.plugins:script-security MAVEN version 1138.v8e727069a025 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle 2.12.0.1 Source cves: CVE-2022-43404...