Rezultati pretraživanja za 'Od datuma: 07.10.2025., Proizvođač: jenkins'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-92126 | 8.5 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an arbitrary class, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, | 2026-09-27 00:16:35 | 2026-09-16 14:17:14 |
| CVE-2026-84658 | 4.3 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing attackers able to submit certain forms to read that configuration. | 2026-09-22 15:51:41 | 2026-09-02 16:17:30 |
| CVE-2026-84659 | 4.3 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data bi | 2026-09-22 13:24:19 | 2026-09-02 16:17:30 |
| CVE-2026-92122 | 8.8 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an interface, if the value inherits a method of the same name as an interface metho | 2026-09-21 17:35:00 | 2026-09-16 14:17:14 |
| CVE-2026-92123 | 8.8 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, property and attribute accesses, and array accesses), allowing attackers with permission to define and run sand | 2026-09-21 17:33:17 | 2026-09-16 14:17:14 |
| CVE-2026-92124 | 8.8 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script casts to another type but performs the cast on the collection itself, allo | 2026-09-21 17:30:34 | 2026-09-16 14:17:14 |
| CVE-2026-92125 | 8.8 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to run an arbitrary AST transf | 2026-09-21 17:30:09 | 2026-09-16 14:17:14 |
| CVE-2026-92127 | 8.0 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer permission copies the item, or updates that configuration through the REST API | 2026-09-21 17:16:22 | 2026-09-16 14:17:14 |
| CVE-2026-92128 | 7.5 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath | 2026-09-21 17:16:03 | 2026-09-16 14:17:14 |
| CVE-2026-92129 | 7.5 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime, allowing attackers with permission to define and run sandboxed scripts, including Pipelin | 2026-09-21 17:15:00 | 2026-09-16 14:17:14 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: