Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2019-10357 · ADVISORY
• jenkinsci/workflow-cps-global-lib-plugin commit 6fce1e2 · WEB
• access.redhat.com/errata/RHSA-2019:2594 · WEB
• access.redhat.com/errata/RHSA-2019:2651 · WEB
• access.redhat.com/errata/RHSA-2019:2662 · WEB
• jenkinsci/workflow-cps-global-lib-plugin · PACKAGE
• jenkins.io/security/advisory/2019-07-31 · WEB
• openwall.com/lists/oss-security/2019/07/31/1 · WEB

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 的其他漏洞

• CVE-2022-43406严重 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with …
• CVE-2022-43405严重 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission …
• CVE-2022-29047中危 5.3Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull reque…
• CVE-2022-25183高危 8.8Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache director…
• CVE-2022-25182高危 8.8A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/…