GHSA-qw28-g63m-jxqv
Sandbox bypass in ontrack Jenkins Plugin
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.jenkins-ci.plugins:ontrack | < 3.4.1 | 3.4.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM.
References
External links from the advisory. They lead to third-party sites.