PG
Product
Pipeline:shared Groovy Libraries
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Pipeline:shared Groovy Libraries to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25183 | 8.8 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25182 | 8.8 | Feb 15 | A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25181 | 8.8 | Feb 15 | A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25174 | 8.8 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25178 | 6.5 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25177 | 6.5 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected Pipeline library when reading files… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-29047 | 5.3 | Apr 12 | Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to… Affected: before 2.21.3; 544.vff04fa68714d before 566.vd0a_a_3334a_555 |
| CVE-2019-10357 | 4.3 | Jul 31 | A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the… Affected: through 2.14 |
Showing 8