💣Exploit CVE-2024-52554 - Jenkins Shared Library Version Override Plugin Remote Code Execution

[Maksim]

CVE ID : CVE-2024-52554
Published : Nov. 13, 2024, 9:15 p.m. | 1 hour, 7 minutes ago
Description : Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.