Description
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922
Related Vulnerabilities
CVE-2018-1297 Vulnerability in maven package org.apache.jmeter:apachejmeter
CVE-2023-31064 Vulnerability in maven package org.apache.inlong:manager-workflow
CVE-2021-33562 Vulnerability in maven package com.shopizer:shopizer
CVE-2022-45470 Vulnerability in maven package org.apache.hama:hama-core
CVE-2023-34468 Vulnerability in maven package org.apache.nifi:nifi-dbcp-base