PG
Product
Pipeline:shared Groovy Libraries
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Pipeline:shared Groovy Libraries to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-25183 | 8.8 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25182 | 8.8 | Feb 15 | A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25181 | 8.8 | Feb 15 | A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute… Affected: through 552.vd9cc05b8a2e1 |
| CVE-2022-25174 | 8.8 | Feb 15 | Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with… Affected: through 552.vd9cc05b8a2e1 |
Showing 4