project

Script Security Plugin

Jenkins plugin that sandboxes Groovy scripts used in job and Pipeline definitions and manages the approval of scripts and signatures that run outside the sandbox.

Known aliases

Script Security
script-security

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

Seven sandbox bypasses in the September Jenkins advisory all terminate in the same plugin

All seven end in arbitrary code execution on the controller and all are fixed in one Script Security release, so the work is finding out which version of it each of your controllers actually runs.

Publishers:dev.to

Reality

Evidence45
Adoption30
Hype gap−5
Incentives30
Confidence50