Jenkins Pipeline Shared Groovy Libraries Plugin (Jenkins Project) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-04-12. Vendor: Jenkins Project.

CVEs of Jenkins Pipeline Shared Groovy Libraries Plugin

• CVE-2022-29047 - CVSS 5.3 (medium), 2022-04-12: Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or…
• CVE-2022-25183 - CVSS 8.8 (high), 2022-02-15: Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any…
• CVE-2022-25182 - CVSS 8.8 (high), 2022-02-15: A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure…
• CVE-2022-25181 - CVSS 8.8 (high), 2022-02-15: A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure…
• CVE-2022-25178 - CVSS 6.5 (medium), 2022-02-15: Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step,…
• CVE-2022-25177 - CVSS 6.5 (medium), 2022-02-15: Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected Pipeline library…
• CVE-2022-25174 - CVSS 8.8 (high), 2022-02-15: Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries,…
• CVE-2019-10357 - CVSS 4.3 (medium), 2019-07-31: A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited…