Improper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-25174 · ADVISORY
• jenkinsci/workflow-cps-global-lib-plugin commit ace0de3 · WEB
• CVEProject/cvelist · WEB
• jenkins.io/security/advisory/2022-02-15 · WEB

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib 的其他漏洞

• CVE-2022-43406严重 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with …
• CVE-2022-43405严重 9.9A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission …
• CVE-2022-29047中危 5.3Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull reque…
• CVE-2022-25183高危 8.8Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache director…
• CVE-2022-25182高危 8.8A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/…