A sandbox bypass vulnerability in Jenkins Splunk Plugin 1.7.4 and previous versions allowed attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jenkins splunk |