Jenkins Groovy Libraries vulnerabilities
2 vulnerabilities
Known vulnerabilities in Jenkins Groovy Libraries, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2022-43406jenkins project · jenkins pipeline: deprecated groovy libraries plugin +3 morejenkins project jenkins pipeline: deprecated groovy libraries pluginA sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.CVSS9.9CriticalEPSS1.39%PrioritiseCVE-2022-43405jenkins project · jenkins pipeline: groovy libraries plugin +3 morejenkins project jenkins pipeline: groovy libraries pluginA sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.CVSS9.9CriticalEPSS1.47%