-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins.workflow:workflow-cps | maven | < 2.64 | 2.64 |
The vulnerability is related to the handling of Groovy scripts. The CpsGroovyShell class is directly mentioned in the context of the vulnerability and the fix involves applying sandbox protection using Script Security APIs. Thus, functions within this class are likely to be the vulnerable ones.