jenkinsci/pipeline-input-step-plugin · Security
Jenkins Pipeline: Input Step Plugin
- GHSA ID
- GHSA-hxpw-7x95-q38m
- CVE ID
- CVE-2017-1000108
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
The Pipeline: Input Step Plugin by default allowed users with Item/Read access to a pipeline to interact with the step to provide input. This has been changed, and now requires users to have the Item/Build permission instead.
CWEs
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor