CVE-2022-29047
1 advisory.
Maven/org.jenkins-ci.plugins.workflow:workflow-cps-global-lib CVE-2022-29047: high 7.3
Untrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin
Action: Upgrade org.jenkins-ci.plugins.workflow:workflow-cps-global-lib to 2.21.3 (2.x) or 566.vd0a (566.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.21.3 | - |
| 544.vff04fa68714d | 566.vd0a | - |
Fixed versions
| 2.21.3 | 566.vd0a |
Sources
- osv: GHSA-hh6f-6fp5-gfpv
- https://nvd.nist.gov/vuln/detail/CVE-2022-29047
- https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/97bf32458e60ad252cfe5e7949bacf04459cee64
- https://github.com/jenkinsci/workflow-cps-global-lib-plugin/commit/bae59b46cb524549d7f346ba73d3161804c97331
- https://www.jenkins.io/security/advisory/2022-04-12/#SECURITY-1951
CVE-2022-29047 · published · modified · JSON