TI-2022-00625 CVE-2022-0711 · GHSA-x4fc-x944-v9p7
Infinite loop in haproxy
Priority MEDIUM 50
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header.
RHSA-2022:1620
OpenShift Container Platform 4.6.57 packages and security update
Released 2022-05-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.6 haproxy-2.0.16-3.el7, haproxy-2.0.16-5.el8, haproxy20-2.0.16-3.el7 +2
Fixes 13 records
TI-2022-08895 CVE-2022-25182 · GHSA-7rcw-fwfh-2h2g
Protection mechanism failure in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority MEDIUM 43
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller JVM usi…
TI-2022-08896 CVE-2022-25183 · GHSA-pfwp-q984-w7wh
Protection mechanism failure in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority MEDIUM 41
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission…
TI-2022-08894 CVE-2022-25181 · GHSA-7w2w-fwpf-9m4h
Protection mechanism failure in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority MEDIUM 41
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins con…
TI-2022-08888 CVE-2022-25175 · GHSA-pj84-qjm3-77mg
OS command injection in Jenkins Pipeline: Multibranch Plugin
Priority MEDIUM 41
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier uses the same checkout directories for distinct SCMs for the readTrusted step, allowing attackers with Item/Configure permission to invoke arbitrary OS c…
TI-2022-08887 CVE-2022-25174 · GHSA-g9fx-6j5c-grmw
OS command injection in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority MEDIUM 41
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for Pipeline libraries, allowing attackers with Item/Configure permission to invoke arbi…
TI-2022-08886 CVE-2022-25173 · GHSA-4m7p-55jm-3vwv
OS command injection in Jenkins Pipeline: Groovy Plugin
Priority MEDIUM 41
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier uses the same checkout directories for distinct SCMs when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers with Item/Configu…
TI-2022-08892 CVE-2022-25179 · GHSA-2m9w-9xh2-wxc3
Link following in Jenkins Pipeline: Multibranch Plugin
Priority LOW 32
Jenkins Pipeline: Multibranch Plugin 706.vd43c65dec013 and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading files using the readTrusted step, allowing atta…
TI-2022-08891 CVE-2022-25178 · GHSA-5hfv-mg5x-mv32
Path traversal in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority LOW 32
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to rea…
TI-2022-08890 CVE-2022-25177 · GHSA-q234-x887-9rxh
Link following in Jenkins Pipeline: Shared Groovy Libraries Plugin
Priority LOW 32
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected Pipeline library when reading files using the libraryResource step, allowing atta…
TI-2022-08889 CVE-2022-25176 · GHSA-6473-gqrj-4p65
Link following in Jenkins Pipeline: Groovy Plugin
Priority LOW 32
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelin…
TI-2022-08897 CVE-2022-25184 · GHSA-g84f-cmc8-682c
Insufficiently protected credentials in Jenkins Pipeline: Build Step Plugin
Priority LOW 30
Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retri…
TI-2022-08893 CVE-2022-25180 · GHSA-qv6q-x9vr-w7j3
Cleartext transmission of sensitive information in Jenkins Pipeline: Groovy Plugin
Priority LOW 21
Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password param…