7 matches found
log4shell-example
Тест эксплойта Log4Shell Цель этого проекта — продемонстрировать уязвимость эксплойта log4j CVE-2021-44228 в настройке spring-boot и показать, как её исправить. Этот проект содержит три подмодуля. Один из них содержит уязвимый код, два других — исправлены. Как использовать этот проект Выполните...
spring-boot-cve-2022-22965
= Демонстрация переопределения версии Spring Framework Этот репозиторий демонстрирует, как можно переопределить версию Spring Framework в приложении на основе Spring Boot 2.4. Spring Boot 2.4.x https://spring.io/projects/spring-bootsupportвышел из поддержки OSS, последняя версия — 2.4.13. Он...
GHSA-7845-CRFJ-PHC4 Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...
CVE-2024-52554
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...
CVE-2024-52554
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...
PT-2024-35376 · Jenkins · Jenkins Shared Library Version Override Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Shared Library Version Override Plugin versions 17.v786074c9fce7 and earlier Description: The issue allows attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox...