Script security sandbox bypass in Matrix Project Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-1003031 · ADVISORY
• jenkinsci/matrix-project-plugin commit 765fc39 · WEB
• access.redhat.com/errata/RHSA-2019:0739 · WEB
• jenkinsci/matrix-project-plugin · PACKAGE
• jenkins.io/security/advisory/2019-03-06 · WEB
• securityfocus.com/bid/107476 · WEB

org.jenkins-ci.plugins:matrix-project のその他の脆弱性

• CVE-2024-23900中 4.3Jenkins Matrix Project Plugin 822.v01b_8c85d16d2 and earlier does not sanitize user-defined axis names of multi-configuration projects, allo…
• CVE-2022-20615中 5.4Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resultin…
• CVE-2020-2225中 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple…
• CVE-2020-2224中 5.4Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a single…