Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Jenkins Subscribe
Filtered by product Pipeline Classpath Step
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-2650 1 Jenkins 1 Pipeline Classpath Step 2019-10-09 6.0 MEDIUM 8.5 HIGH
It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM commit access, as well as users with e.g. Job/Configure permission in Jenkins.