CVE-2022-25181
Assigner: jenkins
Published: 2022-02-15T16:11:03
State: PUBLISHED
affected: product: Jenkins Pipeline: Shared Groovy Libraries Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 552.vd9cc05b8a2e1
status: affected
version: unspecified
versionType: custom
status: unaffected
version: 2.21.1
status: unaffected
version: 2.18.1
descriptions: value: A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.