CVE-2019-10328

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline Remote Loader Plugin versions 1.4 and earlier

Description The issue is related to the custom whitelist for script security in the Jenkins Pipeline Remote Loader Plugin, which allowed attackers to invoke arbitrary methods and bypass typical sandbox protection. This could enable a remote attacker to bypass sandbox restrictions and invoke arbitrary methods.

Recommendations For Jenkins Pipeline Remote Loader Plugin versions 1.4 and earlier, update to version 1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's script security features until a patch is applied.