CVE Database
/

CVE-2022-45379

Back to search

CVE-2022-45379

Published: Nov 15, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the script, making it vulnerable to collision attacks.

VendorProductVersions

Jenkins project

Jenkins Script Security Plugin

affected
unspecified - <= 1189.vb_a_b_7c8fd5fde
unaffected
1175.1179.vea_f7532629e1

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now