Description
Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin | 1.6 and earlier | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.fabric8.pipeline:kubernetes-pipeline-steps | <= 1.6 | — | GHSA-ccxh-j7hg-m5mr |