Description
Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin | 1.6 and earlier | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.fabric8.pipeline:kubernetes-pipeline-arquillian-steps | <= 1.6 | — | GHSA-f46p-q6jh-226m |