Non notée
CVE-2022-25174 Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for…
Description
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Pipeline: Shared Groovy Libraries Plugin 552 | premières → 552.vd9cc05b8a2e1 | Pas de correctif indiqué |
| Jenkins Pipeline: Shared Groovy Libraries Plugin 2.21 | premières → < 2.21.1 | 2.21.1 |
| Jenkins Pipeline: Shared Groovy Libraries Plugin 2.18 | premières → < 2.18.1 | 2.18.1 |
Autres CVE de Jenkins Pipeline: Shared Groovy Libraries Plugin
Les 8 CVE de Jenkins Pipeline: Shared Groovy Libraries Plugin →
CVE-2022-29047
Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers…
Non notée
CVE-2022-25183
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to…
Non notée
CVE-2022-25182
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier…
Non notée
CVE-2022-25181
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier…
Non notée