CVE-2017-1000107
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000107
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000107.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-1000107
- Aliases
- Published
- 2017-10-05T01:29:04Z
- Modified
- 2024-09-03T01:33:25.244576Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type coercion expressions. This could be used to invoke arbitrary constructors and methods, bypassing sandbox protection.
- References
Affected packages
Git / github.com/jenkinsci/script-security-plugin
Affected ranges
- Type
- GIT
- Repo
- https://github.com/jenkinsci/script-security-plugin
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected
Affected versions
script-security-1.*
script-security-1.0
script-security-1.0-beta-1
script-security-1.0-beta-2
script-security-1.0-beta-3
script-security-1.0-beta-4
script-security-1.0-beta-5
script-security-1.0-beta-6
script-security-1.1
script-security-1.10
script-security-1.11
script-security-1.12
script-security-1.13
script-security-1.14
script-security-1.15
script-security-1.16
script-security-1.17
script-security-1.18
script-security-1.19
script-security-1.2
script-security-1.20
script-security-1.21
script-security-1.22
script-security-1.23
script-security-1.24
script-security-1.25
script-security-1.26
script-security-1.27
script-security-1.28
script-security-1.29
script-security-1.3
script-security-1.30
script-security-1.4
script-security-1.5
script-security-1.6
script-security-1.7
script-security-1.8
script-security-1.9