Description
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922
Related Vulnerabilities
CVE-2020-17510 Vulnerability in maven package org.apache.shiro:shiro-spring-boot-web-starter
CVE-2023-50770 Vulnerability in maven package org.jenkins-ci.plugins:oic-auth
CVE-2021-26291 Vulnerability in maven package org.apache.maven:apache-maven
CVE-2020-7679 Vulnerability in npm package casperjs
CVE-2019-10648 Vulnerability in maven package net.sf.robocode:robocode