Executive brief
Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
Affected products
- Maven org.jenkins-ci.plugins:script-security
Junglewise Threat Intelligence
CVE-2022-45379: Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
CVE-2022-45379 · Severity: low · CVSS 3.1 · Published 2022-11-16
Technologies: org.jenkins-ci.plugins:script-security (Maven). Vendors: Maven.
Related threats
- Jenkins Script Security Plugin sandbox bypass via Groovy AST annotations
- Jenkins Script Security Plugin sandbox bypass via Groovy implicit type casts
- Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths
- Missing permission check in Jenkins Script Security Plugin
- Jenkins Script Security Plugin sandbox bypass vulnerability