org.jenkins-ci.plugins.workflow:workflow-cps

3 results · Clear filters · Feed

• High 8.0
  CVE-2024-52550 Public exploit

  Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

  Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build who…

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Nov 13, 2024
• High 8.8
  CVE-2022-25173 Public exploit

  Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

  Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS co…

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Feb 15, 2022
• Critical 9.9
  CVE-2019-1003030 Exploited Public exploit Scanner template EPSS 97%

  Sandbox bypass in Jenkins Pipeline: Groovy Plugin

  A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Mar 8, 2019

  KEV Mar 25, 2022