CVE-2020-2135

2020-03-0916:15:12

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable.

CPENameOperatorVersion
script-security-plugineqscript-security-1.19
script-security-plugineqscript-security-1.0-beta-4
script-security-plugineqscript-security-1.67
script-security-plugineqscript-security-1.21
script-security-plugineqscript-security-1.39
script-security-plugineqscript-security-1.0-beta-6
script-security-plugineqscript-security-1.0-beta-3
script-security-plugineqscript-security-1.51
script-security-plugineqscript-security-1.41
script-security-plugineqscript-security-1.66

Name	Operator	Version
script-security-plugin	eq	script-security-1.19
script-security-plugin	eq	script-security-1.0-beta-4
script-security-plugin	eq	script-security-1.67
script-security-plugin	eq	script-security-1.21
script-security-plugin	eq	script-security-1.39
script-security-plugin	eq	script-security-1.0-beta-6
script-security-plugin	eq	script-security-1.0-beta-3
script-security-plugin	eq	script-security-1.51
script-security-plugin	eq	script-security-1.41
script-security-plugin	eq	script-security-1.66