Package · Maven

cprice404:pipeline-classpath

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.5

CVE-2017-2650

Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass

It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins.

Jenkins Project Pipeline: Classpath Step Jenkins plugin cprice404:pipeline-classpath Web / CMS Maven

Jul 27, 2018