Junglewise Threat Intelligence

CVE-2018-1000146: Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM

CVE-2018-1000146 · Severity: low · CVSS 3 · Published 2022-05-13

Technologies: org.jenkins-ci.plugins:liquibase-runner (Maven). Vendors: Maven.

Executive brief

Liquibase Runner Plugin allows users to load arbitrary Java code into controller JVM

Affected products

  • Maven org.jenkins-ci.plugins:liquibase-runner

Related threats