PT-2020-15508 · Jenkins · Warnings Plugin +4

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.74 and earlier Description: A sandbox bypass issue allows attackers with permission to define sandboxed scripts to execute arbitrary code on the Jenkins controller JVM. This is possible due to the...

Unsafe Dependency Resolution

Overview com.beust:jcommander is a Command line parsing framework for Java. Affected versions of this package are vulnerable to Unsafe Dependency Resolution due to resolving dependencies over an insecure channel http. If the build occurred over an insecure connection, a malicious user could have...