Pipeline: Groovy

Security Warnings

• Arbitrary code execution due to incomplete sandbox protection(last version affected: 2.36)
• Script Security sandbox bypass(last version affected: 2.59)
• Script Security sandbox bypass(last version affected: 2.61)
• Script security sandbox bypass(last version affected: 2.63)
• Script Security sandbox bypass(last version affected: 2.64)
• Sandbox bypass via default method parameter expression(last version affected: 2.78)
• Sensitive information disclosure(last version affected: 2648.va9433432b33c)
• OS command execution vulnerabilities in Pipeline-related plugins(last version affected: 2648.va9433432b33c)
• Vulnerabilities in multiple Pipeline-related plugins allow reading arbitrary files on the controller(last version affected: 2648.va9433432b33c)
• Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files(last version affected: 2689.v434009a_31b_f1)
• Sandbox bypass vulnerability(last version affected: 2802.v5ea_628154b_c2)
• Rebuilding a run with revoked script approval allowed(last version affected: 3990.vd281dd77a_388)
• CSRF vulnerability and unrestricted instantiation of types(last version affected: 4331.v9d06ed4658ff)