Jenkins Groovy Libraries vulnerabilities
2 known vulnerabilities affecting jenkins/groovy_libraries.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2022-43405P3CRITICALCVSS 9.9≤ 612.v84da_9c54906d2022-10-19
CVE-2022-43405 [CRITICAL] CVE-2022-43405: A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and e
A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
nvd
CVE-2022-43406P3CRITICALCVSS 9.9≤ 583.vf3b_454e439662022-10-19
CVE-2022-43406 [CRITICAL] CVE-2022-43406: A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e
A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
nvd