CVE-2020-2134
Fixed in a distro release EPSS 1%
Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies.
Products: Jenkins project Jenkins Script Security Plugin
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.plugins:script-security | 1.7.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 3.11 | jenkins-2-plugins | 0:3.11.1591354111-1.el7 |
| Red Hat openshift 4.3 | jenkins-2-plugins | 0:4.3.1597915133-1.el7 |
| Red Hat openshift 4.4 | jenkins-2-plugins | 0:4.4.1592817009-1.el7 |