In breve
- CVE-2020-2110 è una vulnerabilità ALTO (CVSS 8.8) che riguarda org.jenkins-ci.plugins:script-security, script security (jenkins).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 69.5% delle vulnerabilità.
- Correzione: aggiornare a 1.70 o successiva.
Description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
NVD description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Altre vulnerabilità di org.jenkins-ci.plugins:script-security
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free