Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25712
HistoryJun 19, 2020 - 3:53 a.m.

Sandbox Restrictions Bypass

2020-06-1903:53:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.001

Percentile

43.5%

jenkins-pipeline-groovy-plugin is vulnerable to sandbox restrictions bypass. An attacker is able to bypass the sandbox protection through default parameter expressions in CPS-transformed methods.

EPSS

0.001

Percentile

43.5%