Loading HuntDB...

GHSA-ccxh-j7hg-m5mr

GitHub Security Advisory

Incorrect Authorization in Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin

✓ GitHub Reviewed CRITICAL Has CVE

Advisory Details

Jenkins Kubernetes :: Pipeline :: Kubernetes Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

Affected Packages

Maven io.fabric8.pipeline:kubernetes-pipeline-steps
Affected versions: 0 (last affected: 1.6)

Related CVEs

Key Information

GHSA ID
GHSA-ccxh-j7hg-m5mr
Published
May 24, 2022 4:56 PM
Last Modified
July 17, 2023 9:18 PM
CVSS Score
9.0 /10
Primary Ecosystem
Maven
Primary Package
io.fabric8.pipeline:kubernetes-pipeline-steps
GitHub Reviewed
✓ Yes

Dataset

Last updated: August 25, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.