-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.csanchez.jenkins.plugins:kubernetes | maven | >= 1.27.0, < 1.27.4 | 1.27.4 |
| org.csanchez.jenkins.plugins:kubernetes | maven | >= 1.26.0, < 1.26.5 | 1.26.5 |
| org.csanchez.jenkins.plugins:kubernetes | maven | >= 1.22.0, < 1.25.4.1 | 1.25.4.1 |
| org.csanchez.jenkins.plugins:kubernetes | maven | < 1.21.6 | 1.21.6 |
JavaJavaMiggo AIRoot Cause AnalysisThe commit diff shows the substituteEnv() method was modified to disable environment variable substitution by default. The vulnerability description explicitly states this feature was the exposure vector, and the patch adds a security flag to control it. The function's role in processing template placeholders directly matches the vulnerability mechanism described in advisories.
Ongoing coverage of React2Shell