Em resumo
- CVE-2020-2110 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta org.jenkins-ci.plugins:script-security, script security (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 1.3%, maior que 69.5% das vulnerabilidades.
- Correção: atualize para 1.70 ou posterior.
Description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
NVD description
Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports or by using them inside of other annotations.
Mais vulnerabilidades de org.jenkins-ci.plugins:script-security
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free