VYPR

Groovy Libraries

by Jenkins Project

CVEs (2)

  • CVE-2022-43406CriOct 19, 2022
    risk 0.64cvss 9.9epss 0.01

    A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox…

  • CVE-2022-43405CriOct 19, 2022
    risk 0.64cvss 9.9epss 0.01

    A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and…