https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:57:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-32554 cnvd-2017-32554 https://cve.radiocsirt.org/vuln/cnvd-2017-32554 https://cve.radiocsirt.org/vuln/euvd-2026-80775 EUVD-2026-80775 https://cve.radiocsirt.org/vuln/euvd-2026-80775 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000095 <p>The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild[&#39;rawBuild&#39;] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).</p> <p>The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild[&#39;rawBuild&#39;] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000095 https://cve.radiocsirt.org/vuln/ghsa-m68x-cc2f-gr5h <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:script-security</p> <p>The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild[&#39;rawBuild&#39;] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:script-security</p> <p>The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String). These allowed circumventing many of the access restrictions implemented in the script sandbox by using e.g. currentBuild[&#39;rawBuild&#39;] rather than currentBuild.rawBuild. Additionally, the following entries allowed accessing private data that would not be accessible otherwise due to script security: groovy.json.JsonOutput.toJson(Closure); groovy.json.JsonOutput.toJson(Object).</p> https://cve.radiocsirt.org/vuln/ghsa-m68x-cc2f-gr5h https://cve.radiocsirt.org/vuln/gsd-2017-1000095 gsd-2017-1000095 https://cve.radiocsirt.org/vuln/gsd-2017-1000095 https://cve.radiocsirt.org/vuln/rhea-2017:1716 <p>jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)</p> <p>jenkins-plugin-script-security: Unsafe methods in the default whitelist (SECURITY-538)</p> https://cve.radiocsirt.org/vuln/rhea-2017:1716