Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-52550 · ADVISORY
• jenkinsci/workflow-cps-plugin · PACKAGE
• jenkins.io/security/advisory/2024-11-13 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins.workflow:workflow-cps

• CVE-2022-43404NGHIÊM TRỌNG 9.9A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script …
• CVE-2022-43402NGHIÊM TRỌNG 9.9A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugi…
• CVE-2022-43401NGHIÊM TRỌNG 9.9A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin…
• CVE-2022-30945CAO 8.5Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenk…
• CVE-2022-25180TRUNG BÌNH 4.3Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allo…