high8.8
CVE-2017-1000403
Jenkins Speaks!
Impact
Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Speaks\! | through 0.1.1 |