Script Security

CloudBees CIVersion: 1335.vf07d9ce377a_e

Tier 1: Verified

Plugin ID: script-security

Minimum Jenkins required: 2.387.3

Last released: 10 days, 9 hours ago

Allows Jenkins administrators to control what in-process scripts can be run by less-privileged users.

Groovy sandbox protection incomplete(last version affected: 1.18)
Unsafe methods in the default list of approved signatures(last version affected: 1.29)
Multiple sandbox bypasses(last version affected: 1.30)
Arbitrary file read vulnerability(last version affected: 1.36)
Script Security sandbox bypass(last version affected: 1.47)
Script Security sandbox bypass(last version affected: 1.49)
Script Security sandbox bypass(last version affected: 1.50)
Script Security sandbox bypass(last version affected: 1.52)
Script security sandbox bypass(last version affected: 1.53)
Script Security sandbox bypass(last version affected: 1.55)
Sandbox bypass through type casts(last version affected: 1.61)
Sandbox bypass through method pointer expressions(last version affected: 1.61)
Sandbox bypass vulnerability(last version affected: 1.62)
Sandbox bypass vulnerability(last version affected: 1.64)
Sandbox bypass vulnerability(last version affected: 1.67)
Sandbox bypass vulnerability(last version affected: 1.69)
Sandbox bypass vulnerability(last version affected: 1.70)
Stored XSS vulnerability(last version affected: 1.72)
Sandbox bypass vulnerability(last version affected: 1.74)
CSRF vulnerability(last version affected: 1158.v7c1b_73a_69a_08)
Sandbox bypass vulnerability(last version affected: 1183.v774b_0b_0a_a_451)
Whole-script approval vulnerable to SHA-1 collisions(last version affected: 1189.vb_a_b_7c8fd5fde)
Sandbox bypass vulnerability(last version affected: 1228.vd93135a_2fb_25)

Script Security 1335.vf07d9ce377a_e

SHA1:

fbbb1a9ce09cc10cb245e8894295820cd0c42137

SHA256:

efd2a522e9bb8cb2bd9136bb8015cdf13ac1676a961fb58c03418c93d99a60ee

Maintainers:

Dependencies: