Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-25184 · ADVISORY
• jenkinsci/pipeline-build-step-plugin commit c06f654 · WEB
• jenkinsci/pipeline-build-step-plugin · PACKAGE
• jenkins.io/security/advisory/2022-02-15 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:pipeline-build-step

• CVE-2023-25762TRUNG BÌNH 5.4Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Gener…
• CVE-2020-2118TRUNG BÌNH 4.3A missing permission check in Jenkins Pipeline GitHub Notify Step Plugin 1.0.4 and earlier in form-related methods allowed users with Overal…
• CVE-2017-1000089TRUNG BÌNH 5.3Builds in Jenkins are associated with an authentication that controls the permissions that the build has to interact with other elements in …