log4shell-example

Log4Shell エクスプロイトテスト このプロジェクトの目的は、spring-boot 環境における log4j CVE-2021-44228 のエクスプロイト脆弱性を実演し、その修正方法を示すことです。 このプロジェクトには3つのサブモジュールが含まれています。そのうちの1つは脆弱なコードを含み、他の2つはパッチが適用されています。 このプロジェクトの使用方法 プロジェクトのルートで ./mvnw clean test を実行すると、両方のモジュールのテストが実行されます。 log4shell-example-unpatched...

spring-boot-cve-2022-22965

Spring Framework バージョン上書きのデモ このリポジトリは、Spring Boot 2.4ベースのアプリケーションでSpring Frameworkのバージョンを上書きする方法を示しています。 Spring Boot 2.4.xは https://spring.io/projects/spring-bootsupportOSSサポート終了 で、最新バージョンは 2.4.13 です。これは、https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcementCVE-2022-22965...

Security update for pyenv (moderate)

openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2026:0311-1 Rating: moderate References: 1275661 Cross-References: CVE-2026-68939 CVSS scores: CVE-2026-68939 SUSE: 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP7 An...

GHSA-7845-CRFJ-PHC4 Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

PT-2024-35376 · Jenkins · Jenkins Shared Library Version Override Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Shared Library Version Override Plugin versions 17.v786074c9fce7 and earlier Description: The issue allows attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox...

Script security sandbox bypass vulnerability in shared-library-version-override

shared-library-version-override 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox. This allows attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs...