Script security sandbox bypass in Matrix Project Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-1003031 · ADVISORY
• jenkinsci/matrix-project-plugin commit 765fc39 · WEB
• access.redhat.com/errata/RHSA-2019:0739 · WEB
• jenkinsci/matrix-project-plugin · PACKAGE
• jenkins.io/security/advisory/2019-03-06 · WEB
• securityfocus.com/bid/107476 · WEB

Autres vulnérabilités de org.jenkins-ci.plugins:matrix-project

• CVE-2024-23900MOYENNE 4.3Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allo…
• CVE-2022-20615MOYENNE 5.4Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resultin…
• CVE-2020-2225MOYENNE 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple…
• CVE-2020-2224MOYENNE 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single…