# org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (Maven) vulnerabilities

10 known vulnerabilities, with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://central.sonatype.com/artifact/org.jenkins-ci.plugins.workflow/workflow-cps-global-lib

## Advisories (10)

### [CVE-2022-43406](https://cve.now/CVE-2022-43406): A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b\_454e43966 and earlier allows attackers…

- Severity: Unrated
- Published: Oct 19, 2022
- Affected: fixed in 588.v576c103a_ff86.

### [CVE-2022-43405](https://cve.now/CVE-2022-43405): A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da\_9c54906d and earlier allows attackers with…

- Severity: Unrated
- Published: Oct 19, 2022
- Affected: fixed in 588.v576c103a_ff86.

### [CVE-2022-29047](https://cve.now/CVE-2022-29047): Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a\_4eb\_b\_e039 and earlier, except 2.21.3, allows attackers able to submit pull…

- Severity: Unrated
- Published: Apr 12, 2022
- Affected: fixed in 2.21.3; from 544.vff04fa68714d, fixed in 566.vd0a.

### [CVE-2022-25183](https://cve.now/CVE-2022-25183): Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: fixed in 561.va_ce0de3c2d69.

### [CVE-2022-25182](https://cve.now/CVE-2022-25182): A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: fixed in 561.va_ce0de3c2d69.

### [CVE-2022-25181](https://cve.now/CVE-2022-25181): A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: fixed in 561.va_ce0de3c2d69.

### [CVE-2022-25178](https://cve.now/CVE-2022-25178): Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: from 2.22, fixed in 561.va_ce0de3c2d69; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

### [CVE-2022-25177](https://cve.now/CVE-2022-25177): Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier follows symbolic links to locations outside of the expected…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: from 2.22, fixed in 561.va_ce0de3c2d69; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

### [CVE-2022-25174](https://cve.now/CVE-2022-25174): Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the same checkout directories for distinct SCMs for…

- Severity: Unrated
- Published: Feb 15, 2022
- Affected: from 544.vff04fa68714d, fixed in 561.va; from 2.19, fixed in 2.21.1; fixed in 2.18.1.

### [CVE-2019-10357](https://cve.now/CVE-2019-10357): A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to…

- Severity: Unrated
- Published: Jul 31, 2019
- Affected: fixed in 2.15.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/maven/org.jenkins-ci.plugins.workflow:workflow-cps-global-lib
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.