Lucene search
GoogleOSV:GHSA-R5C7-QCC9-5V7MHistoryMay 13, 2022 - 1:36 a.m.
Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass
2022-05-1301:36:51
Google
osv.dev
7
jenkins
pipeline
classpath step
script security
sandbox bypass
scm commit access
job/configure permission
It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins.
Related
nvd
nvd
CVE-2017-2650
2018-07-27 20:29:00
cvelist
cvelist
CVE-2017-2650
2018-07-27 20:00:00
github
github
prion
prion
Design/Logic Flaw
2018-07-27 20:29:00
cve
cve
CVE-2017-2650
2018-07-27 20:29:00