Not rated
CVE-2022-25182 A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier…
Description
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller JVM using specially crafted library names if a global Pipeline library is already configured.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Pipeline: Shared Groovy Libraries Plugin 552 | earliest → 552.vd9cc05b8a2e1 | No fix stated |
| Jenkins Pipeline: Shared Groovy Libraries Plugin 2.21 | earliest → < 2.21.1 | 2.21.1 |
| Jenkins Pipeline: Shared Groovy Libraries Plugin 2.18 | earliest → < 2.18.1 | 2.18.1 |
Other CVEs of Jenkins Pipeline: Shared Groovy Libraries Plugin
The 8 CVEs of Jenkins Pipeline: Shared Groovy Libraries Plugin →
CVE-2022-29047
Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers…
Not rated
CVE-2022-25183
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to…
Not rated
CVE-2022-25181
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier…
Not rated
CVE-2022-25178
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of…
Not rated