Script Security

CloudBees CIVersion: 1275.v23895f409fb_d

Tier 1: Verified

Plugin ID: script-security

Minimum Jenkins required: 2.387.3

Last released: 23 days, 11 hours ago

Allows Jenkins administrators to control what in-process scripts can be run by less-privileged users.

Groovy sandbox protection incomplete(last version affected: 1.18)
Unsafe methods in the default list of approved signatures(last version affected: 1.29)
Multiple sandbox bypasses(last version affected: 1.30)
Arbitrary file read vulnerability(last version affected: 1.36)
Script Security sandbox bypass(last version affected: 1.47)
Script Security sandbox bypass(last version affected: 1.49)
Script Security sandbox bypass(last version affected: 1.50)
Script Security sandbox bypass(last version affected: 1.52)
Script security sandbox bypass(last version affected: 1.53)
Script Security sandbox bypass(last version affected: 1.55)
Sandbox bypass through type casts(last version affected: 1.61)
Sandbox bypass through method pointer expressions(last version affected: 1.61)
Sandbox bypass vulnerability(last version affected: 1.62)
Sandbox bypass vulnerability(last version affected: 1.64)
Sandbox bypass vulnerability(last version affected: 1.67)
Sandbox bypass vulnerability(last version affected: 1.69)
Sandbox bypass vulnerability(last version affected: 1.70)
Stored XSS vulnerability(last version affected: 1.72)
Sandbox bypass vulnerability(last version affected: 1.74)
CSRF vulnerability(last version affected: 1158.v7c1b_73a_69a_08)
Sandbox bypass vulnerability(last version affected: 1183.v774b_0b_0a_a_451)
Whole-script approval vulnerable to SHA-1 collisions(last version affected: 1189.vb_a_b_7c8fd5fde)
Sandbox bypass vulnerability(last version affected: 1228.vd93135a_2fb_25)

Script Security 1275.v23895f409fb_d

SHA1:

2aed8f6c8d4821ad5d7a06c6955e5ab5c1eaade8

SHA256:

31bb87d3db38951197fe0ec20062e07247ed4101a266f418678a5006e35eff0a

Maintainers:

Dependencies: