Executive brief
Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Affected products
- Maven org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
- Maven io.jenkins.plugins:pipeline-groovy-lib
Junglewise Threat Intelligence
CVE-2022-43406: Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
CVE-2022-43406 · Severity: low · CVSS 3.1 · Published 2022-10-19
Technologies: org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (Maven), io.jenkins.plugins:pipeline-groovy-lib (Maven). Vendors: Maven.
Related threats
- Jenkins Pipeline Groovy Plugin unrestricted instantiation in Snippet Generator
- Jenkins Pipeline Groovy Plugin CSRF in Snippet Generator
- Jenkins Pipeline: Groovy Libraries Plugin arbitrary file read via symbolic links
- Sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin
- Missing Authorization in Jenkins Pipeline: Shared Groovy Libraries Plugin