CVE-2022-30945

Description

Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.

Affected products

• Jenkins Project / Jenkins Pipeline: Groovy Pluginunspecified – 2689.v434009a_31b_f1
• Jenkins Project / Jenkins Pipeline: Groovy Plugin2683.2687.vb_0cc3f973f06 – 2683.2687.vb_0cc3f973f06
• Jenkins Project / Jenkins Pipeline: Groovy Plugin2.94.4 – 2.94.4

References

• MISChttps://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2022/05/17/8