CVE-2017-1000096
1 advisory.
Maven/org.jenkins-ci.plugins.workflow:workflow-cps CVE-2017-1000096: high 8.8, EPSS 1.61%
Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
Action: Upgrade org.jenkins-ci.plugins.workflow:workflow-cps to 2.36.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.36.1 | - |
Fixed versions
| 2.36.1 |
Sources
- osv: GHSA-mhwq-4mh7-fv7c
- https://nvd.nist.gov/vuln/detail/CVE-2017-1000096
- https://jenkins.io/security/advisory/2017-07-10
- http://www.securityfocus.com/bid/99571
CVE-2017-1000096 · published · modified · JSON