CVE-2022-25183
Published Feb 15, 2022Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing…
Vendor/product archive
jenkins / pipeline:shared_groovy_libraries CVEs
Beta · best-effort7 CVEs tagged to jenkins / pipeline:shared_groovy_libraries — 0 Critical, 4 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2022-25182
Published Feb 15, 2022A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitra…
CVE-2022-25181
Published Feb 15, 2022A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitra…
CVE-2022-25178
Published Feb 15, 2022Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able…
CVE-2022-25177
Published Feb 15, 2022Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected Pipeline library when reading files usin…
CVE-2022-25174
Published Feb 15, 2022Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with…
CVE-2019-10357
Published Jul 31, 2019A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the cont…
Showing 1-7 of 7 CVEsPage 1 of 1