Executive brief
Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
Affected products
- Maven org.jenkins-ci.plugins:script-security
- Maven org.jenkins-ci.plugins.workflow:workflow-cps
Junglewise Threat Intelligence
CVE-2022-43401: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
CVE-2022-43401 · Severity: low · CVSS 3.1 · Published 2022-10-19
Vendors: Maven.
Related threats
- Jenkins Script Security Plugin sandbox bypass via Groovy AST annotations
- Jenkins Script Security Plugin sandbox bypass via Groovy implicit type casts
- Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths
- Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
- Missing permission check in Jenkins Script Security Plugin