支持本站 — 捐款将帮助我们持续运营

目标: 1000 元,已筹: 1000

100.0%

POC详情: 215ca6b5b9f152d1e904f088ced40d0f6f2ab591

来源
关联漏洞
标题:Jenkins Pipeline 操作系统命令注入漏洞 (CVE-2022-25174)
POC 描述:Jenkins Pipeline是一套插件,支持将持续交付管道实施和集成到 Jenkins 中。 Jenkins Pipeline存在安全漏洞,攻击者可利用该漏洞通过制作SCM内容调用控制器上的任意OS命令。
介绍
# Pipeline Shared Libraries

When you have multiple Pipeline jobs, you often want to share some parts of the Pipeline scripts between them to keep Pipeline scripts [DRY](http://en.wikipedia.org/wiki/Don't_repeat_yourself).
A very common use case is that you have many projects that are built in the similar way.

This plugin adds that functionality by allowing you to create “shared library script” SCM repositories.
It can be used in two modes:

-   A legacy mode in which there is a single Git repository hosted by Jenkins itself, to which you may push changes
-   A more general mode in which you may define libraries hosted by any SCM in a location of your choice.

Comprehensive user documentation can be found [in the Pipeline chapter of the User Handbook](https://jenkins.io/doc/book/pipeline/shared-libraries/).
文件快照

[4.0K] /data/pocs/215ca6b5b9f152d1e904f088ced40d0f6f2ab591 ├── [9.1K] CHANGELOG.md ├── [ 200] Jenkinsfile ├── [8.4K] pom.xml ├── [ 824] README.md └── [4.0K] src ├── [4.0K] main │   ├── [4.0K] java │   │   └── [4.0K] org │   │   └── [4.0K] jenkinsci │   │   └── [4.0K] plugins │   │   └── [4.0K] workflow │   │   ├── [4.0K] cps │   │   │   └── [4.0K] global │   │   │   ├── [3.2K] GrapeHack.java │   │   │   ├── [1.2K] GroovyShellDecoratorImpl.java │   │   │   ├── [3.5K] UserDefinedGlobalVariable.java │   │   │   ├── [1.8K] UserDefinedGlobalVariableList.java │   │   │   ├── [1.8K] UserDefinedGlobalVariableRepoListener.java │   │   │   ├── [2.9K] WorkflowLibRepository.java │   │   │   ├── [1.5K] WorkflowLibRepositoryListener.java │   │   │   └── [1.2K] WorkflowLibSshRepository.java │   │   └── [4.0K] libs │   │   ├── [2.8K] ClasspathAdder.java │   │   ├── [3.9K] FolderLibraries.java │   │   ├── [3.7K] GlobalLibraries.java │   │   ├── [2.5K] LibrariesAction.java │   │   ├── [ 16K] LibraryAdder.java │   │   ├── [1.4K] LibraryCachingCleanup.java │   │   ├── [2.9K] LibraryCachingConfiguration.java │   │   ├── [8.6K] LibraryConfiguration.java │   │   ├── [8.2K] LibraryDecorator.java │   │   ├── [1.5K] Library.java │   │   ├── [2.8K] LibraryRecord.java │   │   ├── [3.9K] LibraryResolver.java │   │   ├── [1.3K] LibraryRetrieverDescriptor.java │   │   ├── [4.4K] LibraryRetriever.java │   │   ├── [ 15K] LibraryStep.java │   │   ├── [3.8K] ResourceStep.java │   │   ├── [5.7K] SCMRetriever.java │   │   └── [ 16K] SCMSourceRetriever.java │   └── [4.0K] resources │   ├── [ 89] index.jelly │   └── [4.0K] org │   └── [4.0K] jenkinsci │   └── [4.0K] plugins │   └── [4.0K] workflow │   ├── [4.0K] cps │   │   └── [4.0K] global │   │   └── [4.0K] UserDefinedGlobalVariable │   │   └── [ 110] help.jelly │   └── [4.0K] libs │   ├── [4.0K] FolderLibraries │   │   ├── [1.6K] config.jelly │   │   └── [1.3K] config.properties │   ├── [4.0K] GlobalLibraries │   │   ├── [1.8K] config.jelly │   │   └── [1.3K] config.properties │   ├── [4.0K] LibraryCachingConfiguration │   │   ├── [1.5K] config.jelly │   │   ├── [ 104] help-excludedVersionsStr.html │   │   └── [ 153] help-refreshTimeMinutes.html │   ├── [4.0K] LibraryConfiguration │   │   ├── [2.0K] config.jelly │   │   ├── [ 236] help-allowVersionOverride.html │   │   ├── [ 94] help-cachingConfiguration.html │   │   ├── [ 169] help-defaultVersion.html │   │   ├── [ 141] help-implicit.html │   │   ├── [ 301] help-includeInChangesets.html │   │   └── [ 349] help-name.html │   ├── [4.0K] LibraryStep │   │   ├── [1.6K] config.jelly │   │   ├── [ 162] help-changelog.html │   │   ├── [ 644] help.html │   │   └── [ 198] help-identifier.html │   ├── [1.5K] Messages.properties │   ├── [4.0K] ResourceStep │   │   ├── [1.4K] config.jelly │   │   ├── [ 235] help-encoding.html │   │   ├── [ 99] help.html │   │   └── [ 126] help-resource.html │   ├── [4.0K] SCMRetriever │   │   ├── [1.5K] config.jelly │   │   ├── [1.4K] config.properties │   │   └── [ 246] help-libraryPath.html │   └── [4.0K] SCMSourceRetriever │   ├── [1.5K] config.jelly │   ├── [1.3K] config.properties │   └── [ 246] help-libraryPath.html └── [4.0K] test └── [4.0K] java └── [4.0K] org └── [4.0K] jenkinsci └── [4.0K] plugins └── [4.0K] workflow ├── [4.0K] cps │   └── [4.0K] global │   ├── [4.8K] CompilationErrorsExceptionTest.java │   ├── [ 11K] GrapeTest.java │   ├── [2.3K] UserDefinedGlobalVariableListTest.java │   ├── [2.6K] WorkflowLibRepositoryLocalTest.java │   └── [ 10K] WorkflowLibRepositoryTest.java └── [4.0K] libs ├── [ 824] FailingSCMSourceDuringFetch.java ├── [2.0K] FailingSCMSource.java ├── [ 15K] FolderLibrariesTest.java ├── [5.4K] GlobalLibrariesTest.java ├── [ 22K] LibraryAdderTest.java ├── [4.9K] LibraryCachingConfigurationTest.java ├── [3.7K] LibraryConfigurationTest.java ├── [6.9K] LibraryDecoratorTest.java ├── [4.2K] LibraryMemoryTest.java ├── [ 15K] LibraryStepTest.java ├── [ 12K] ResourceStepTest.java ├── [ 11K] RestartTest.java ├── [4.7K] SCMRetrieverTest.java └── [ 19K] SCMSourceRetrieverTest.java 36 directories, 80 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮件到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对 POC 代码进行快照,为了长期维护,请考虑为本地 POC 付费/捐赠,感谢您的支持。