Description
jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the agent-to-master security subsystem. This could allow metadata files to be written to by malicious agents (SECURITY-358).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | jenkins | jenkins 2.44, jenkins 2.32.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | < 2.32.2 | 2.32.2 | GHSA-ffgg-vphh-v273 |
| Maven | org.jenkins-ci.main:jenkins-core | >= 2.34, < 2.44 | 2.44 | GHSA-ffgg-vphh-v273 |