Security controls bypass or absence In org.jenkins-ci.plugins:script-security
Description
Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 1.18.1 |
Aliases
1. 2. 3. 4.
References
1. 2.