Description
A command execution vulnerability exists in Jenkins Absint Astree Plugin 1.0.5 and older in AstreeBuilder.java that allows attackers with Overall/Read access to execute a command on the Jenkins master.
Remediation
References
https://jenkins.io/security/advisory/2018-06-04/#SECURITY-807
Related Vulnerabilities
CVE-2013-2067 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2023-30518 Vulnerability in maven package io.jenkins.plugins:thycotic-secret-server
CVE-2020-8823 Vulnerability in npm package sockjs
CVE-2020-11979 Vulnerability in maven package org.apache.ant:ant
CVE-2022-22984 Vulnerability in npm package snyk-gradle-plugin