Vulnerabilidades do Maven Org.jenkins-ci.plugins.workflow:workflow-cps

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Org.jenkins-ci.plugins.workflow:workflow-cps: 1 registro(s), com versões afetadas e correções.

CVE-2019-1003030 Crítica · 9.9 KEV Urgente · 78 Exploit público CWE-693 08/03/2019

Jenkins Matrix Project Plugin Remote Code Execution Vulnerability

A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.