MEDIUM 4.3
GHSA-jv82-75fh-23r7
Missing permission check in Jenkins Script Security Plugin
빠른 조치
GHSA-jv82-75fh-23r7 — org.jenkins-ci.plugins:script-security: 아래 명령으로 수정 버전으로 올리세요.
# pom.xml: bump <version>1368.vb</version> for org.jenkins-ci.plugins:script-security상세
Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system. This allows attackers with Overall/Read permission to check for the existence of files on the controller file system. Script Security Plugin 1368.vb_b_402e3547e7 requires Overall/Administer permission for the affected form validation method.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
Maven / org.jenkins-ci.plugins:script-security
최초 영향 버전:
0 수정 버전: 1368.vb 수정
# pom.xml: bump <version>1368.vb</version> for org.jenkins-ci.plugins:script-security