CVE-2019-10380 - Jenkins Simple Travis Pipeline Runner

Critical 8.8

Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code.

Affected software

Jenkins Simple Travis Pipeline Runner

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.