En resumen
- CVE-2020-2110 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a org.jenkins-ci.plugins:script-security, script security (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.5% de las vulnerabilidades.
- Solución: actualizar a 1.70 o posterior.
Description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
NVD description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Más vulnerabilidades de org.jenkins-ci.plugins:script-security
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free