Description
Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.
Remediation
References
http://www.openwall.com/lists/oss-security/2019/08/07/1
https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922
Related Vulnerabilities
CVE-2020-2120 Vulnerability in maven package org.jenkins-ci.plugins:fitnesse
CVE-2020-7760 Vulnerability in maven package org.webjars.bower:codemirror
CVE-2019-1003097 Vulnerability in maven package com.ds.tools.hudson:crowd
CVE-2022-31103 Vulnerability in npm package lettersanitizer
CVE-2022-34115 Vulnerability in maven package io.dataease:dataease-plugin-common