High severity7.5NVD Advisory· Published Oct 5, 2017· Updated Jun 17, 2026
CVE-2017-1000108
CVE-2017-1000108
Description
The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:pipeline-input-stepMaven | < 2.7 | 2.7 |
Affected products
9cpe:2.3:a:jenkins:pipeline-input-step:2.0:*:*:*:*:jenkins:*:*+ 7 more
- cpe:2.3:a:jenkins:pipeline-input-step:2.0:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.1:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.2:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.3:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.4:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.5:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.6:*:*:*:*:jenkins:*:*
- cpe:2.3:a:jenkins:pipeline-input-step:2.7:*:*:*:*:jenkins:*:*
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-hxpw-7x95-q38mghsaADVISORY
- jenkins.io/security/advisory/2017-08-07/nvdVendor Advisory
- nvd.nist.gov/vuln/detail/CVE-2017-1000108ghsaADVISORY
- jenkins.io/security/advisory/2017-08-07ghsaWEB
News mentions
0No linked articles in our index yet.