CVE-2017-1000403

Publication date

2018-01-26 02:00:00

Family

mitre

State

PUBLISHED

Description

Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts.