Script Security

CloudBees CIVersion: 1229.v4880b_b_e905a_6

Tier 1: Verified

Plugin ID: script-security

Minimum Jenkins required: 2.346.1

Last released: 2 months, 4 days ago

Allows Jenkins administrators to control what in-process scripts can be run by less-privileged users.

Groovy sandbox protection incomplete(last version affected: 1.18)
Unsafe methods in the default list of approved signatures(last version affected: 1.29)
Multiple sandbox bypasses(last version affected: 1.30)
Arbitrary file read vulnerability(last version affected: 1.36)
Script Security sandbox bypass(last version affected: 1.47)
Script Security sandbox bypass(last version affected: 1.49)
Script Security sandbox bypass(last version affected: 1.50)
Script Security sandbox bypass(last version affected: 1.52)
Script security sandbox bypass(last version affected: 1.53)
Script Security sandbox bypass(last version affected: 1.55)
Sandbox bypass through type casts(last version affected: 1.61)
Sandbox bypass through method pointer expressions(last version affected: 1.61)
Sandbox bypass vulnerability(last version affected: 1.62)
Sandbox bypass vulnerability(last version affected: 1.64)
Sandbox bypass vulnerability(last version affected: 1.67)
Sandbox bypass vulnerability(last version affected: 1.69)
Sandbox bypass vulnerability(last version affected: 1.70)
Stored XSS vulnerability(last version affected: 1.72)
Sandbox bypass vulnerability(last version affected: 1.74)
CSRF vulnerability(last version affected: 1158.v7c1b_73a_69a_08)
Sandbox bypass vulnerability(last version affected: 1183.v774b_0b_0a_a_451)
Whole-script approval vulnerable to SHA-1 collisions(last version affected: 1189.vb_a_b_7c8fd5fde)
Sandbox bypass vulnerability(last version affected: 1228.vd93135a_2fb_25)

Script Security 1229.v4880b_b_e905a_6

SHA1:

f5a6c17576cd9f3696165cbfaa0baed021749866

SHA256:

c2a36c560e04a099a4037a08298a8b87bb514ae739b915fd882ba07b2fbf25e6

Maintainers:

Dependencies: