漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jenkins 插件 代码注入漏洞
Vulnerability Description
Jenkins 插件是为Jenkins提供相应功能得插件。 Jenkins Pipeline: Shared Groovy Libraries 插件552.vd9cc05b8a2e1及更早版本存在安全漏洞，该漏洞源于使用管道库的名称来创建缓存目录，而不进行任何清理。攻击者可利用该漏洞使用特制的库名称在Jenkins controller JVM的上下文中执行任意代码。。
CVSS Information
N/A
Vulnerability Type
N/A