Description
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922
Related Vulnerabilities
CVE-2022-46751 Vulnerability in maven package org.apache.ivy:ivy
CVE-2022-36098 Vulnerability in maven package org.xwiki.platform:xwiki-platform-mentions-ui
CVE-2020-7682 Vulnerability in npm package marked-tree
CVE-2019-16776 Vulnerability in maven package org.webjars:npm
CVE-2022-44729 Vulnerability in maven package org.apache.xmlgraphics:batik-bridge