CVE-2024-52554

The Jenkins Shared Library Version Override Plugin versions 17.v786074c9fce7 and earlier contains a script security sandbox bypass. The root cause is that the plugin declares folder-scoped library overrides as trusted , exempting them from sandbox execution. An attacker with Item/Configure permis...