GitHub Advisoryadvisory · Maven

GHSA-7845-crfj-phc4 Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

HIGH Published 2024-11-13 Modified 2024-11-14 Official page ↗
Aliases
CVE-2024-52554
Ecosystem
Maven
Packages
io.jenkins.plugins:shared-library-version-override
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862
Reviewed
2024-11-14

Affected packages

• Maven io.jenkins.plugins:shared-library-version-override: < 19.v3a → fixed in 19.v3a

Description

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection. This allows attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection. Shared Library Version Override Plugin 19.v3a_c975738d4a_ declares folder-scoped library overrides as untrusted, so that they’re executed in the Script Security sandbox.

Related

Alias · CVE (1)

  • CVE-2024-52554 Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that… vulnerability

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References