https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:27:53 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-17219 cnvd-2017-17219 https://cve.radiocsirt.org/vuln/cnvd-2017-17219 https://cve.radiocsirt.org/vuln/euvd-2026-80783 EUVD-2026-80783 https://cve.radiocsirt.org/vuln/euvd-2026-80783 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000096 <p>Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.</p> <p>Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000096 https://cve.radiocsirt.org/vuln/ghsa-mhwq-4mh7-fv7c <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins.workflow:workflow-cps</p> <p>Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins.workflow:workflow-cps</p> <p>Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could be exploited e.g. by regular Jenkins users with the permission to configure Pipelines in Jenkins, or by trusted committers to repositories containing Jenkinsfiles.</p> https://cve.radiocsirt.org/vuln/ghsa-mhwq-4mh7-fv7c https://cve.radiocsirt.org/vuln/gsd-2017-1000096 gsd-2017-1000096 https://cve.radiocsirt.org/vuln/gsd-2017-1000096 https://cve.radiocsirt.org/vuln/rhba-2017:2642 <p>jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)</p> <p>jenkins-plugin-subversion: CSRF vulnerability and insufficient permission checks allow capturing credentials (SECURITY-303) jenkins-plugin-pipeline-build-step: Missing check of Item/Build permission (SECURITY-433) jenkins-plugin-git: CSRF vulnerability allows capturing credentials (SECURITY-528) jenkins-plugin-workflow-cps: Arbitrary code execution due to incomplete sandbox protection (SECURITY-551)</p> https://cve.radiocsirt.org/vuln/rhba-2017:2642