Detections
Analytics
CVE-2020-2109
high
Description
Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods.
References
https://github.com/advisories/GHSA-99mf-f3qh-wqrp
https://jenkins.io/security/advisory/2020-02-12/#SECURITY-1710