Non notée
CVE-2022-25176 Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the…
Description
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Pipeline: Groovy Plugin 2648 | premières → 2648.va9433432b33c | Pas de correctif indiqué |
| Jenkins Pipeline: Groovy Plugin 2.94 | premières → < 2.94.1 | 2.94.1 |
| Jenkins Pipeline: Groovy Plugin 2.92 | premières → < 2.92.1 | 2.92.1 |
Références
- www.jenkins.io www.jenkins.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins Pipeline: Groovy Plugin
Les 11 CVE de Jenkins Pipeline: Groovy Plugin →
CVE-2026-57284
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated…
4.3
Moyenne
CVE-2026-57283
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier…
4.3
Moyenne
CVE-2024-52550
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether…
8.0
Élevée
CVE-2022-43402
A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins…
Non notée