org.jenkins-ci.plugins.workflow:workflow-support

2 results · Feed

• Medium 5.4
  CVE-2022-43409

  Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin

  Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able…

  Jenkins Project Jenkins Pipeline: Supporting APIs Plugin org.jenkins-ci.plugins.workflow:workflow-support Web / CMS Maven
  Oct 19, 2022
• High 8.8
  CVE-2018-1000058

  Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs Plugin

  Jenkins Pipeline: Supporting APIs Plugin 2.17 and earlier have an arbitrary code execution due to incomplete sandbox protection: Methods related to Java deserialization like readResolve implemented in Pipeline scripts were not subject to sandbox protection, a…

  org.jenkins-ci.plugins.workflow:workflow-support Maven
  Feb 9, 2018