org.jenkins-ci.plugins.workflow:workflow-cps

2 results · Clear filters · Feed

• High 8.0
  CVE-2024-52550 Public exploit

  Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

  Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build who…

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Nov 13, 2024
• High 8.8
  CVE-2022-25173 Public exploit

  Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin

  Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configure permission to invoke arbitrary OS co…

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Feb 15, 2022