Jenkins Plugin Sandbox Bypass and Info Disclosure Vulnerabilities (CVE-2019-1003029-1003035)
Security Advisory
SA-CORE-2019-03-06
High
Jenkins
Affected:
- jenkins-script-security-plugin
- jenkins-pipeline-groovy-plugin
- jenkins-matrix-project-plugin
- jenkins-email-extension-plugin
- jenkins-groovy-plugin
Fixed in:
- jenkins-appdynamics-dashboard-plugin 1.0.15
- jenkins-azure-vm-agents-plugin 0.8.1
- jenkins-bitbar-run-in-cloud-plugin 2.70.0
Referenced CVEs:
CVE-2019-1003039
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from jenkins.io, cleaned by our LLM pipeline, and translated to English. View original.