CVE-2022-30945 — Jenkins project / Jenkins Pipeline: Groovy Plugin

Description (CNA)

Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.

Affected (CNA)

Vendor / product	Versions
Jenkins project / Jenkins Pipeline: Groovy Plugin	affected unspecified through 2689.v434009a_31b_f1; unaffected 2683.2687.vb_0cc3f973f06; unaffected 2.94.4

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359
http://www.openwall.com/lists/oss-security/2022/05/17/8

ADP enrichment

CVE

No English description supplied.

https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359
http://www.openwall.com/lists/oss-security/2022/05/17/8