Access Restriction Bypass Affecting org.jenkins-ci.plugins.workflow:workflow-cps-parent package, versions [,3975.3977.v478dd9e956c3) [3990.vd281dd77a_388,3993.v3e20a_37282f8)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGJENKINSCIPLUGINSWORKFLOW-8380994
- published 14 Nov 2024
- disclosed 14 Nov 2024
- credit Kevin Guerroudj, CloudBees, Inc.
Introduced: 14 Nov 2024
New CVE-2024-52550 Open this link in a new tabHow to fix?
Upgrade org.jenkins-ci.plugins.workflow:workflow-cps-parent to version 3975.3977.v478dd9e956c3, 3993.v3e20a_37282f8 or higher.
Overview
Affected versions of this package are vulnerable to Access Restriction Bypass due to missing checks for an approved rebuilt build. This allows attackers with Item/Build permission to rebuild a previous build whose script is no longer approved.