GCVE - cpe:2.3:a:jenkins:simple_travis_pipeline

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:simple_travis_pipeline_runner:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Simple Travis Pipeline Runner (`4f60f2b3-c583-5abe-8591-df1ad19dbccb`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-10380`	vulnerable	2026-06-08 05:12:23.245603	Details available Jenkins Simple Travis Pipeline Runner Plugin 1.0 and earlier specifies unsafe values in its custom Script Security whitelist, allowing attackers able to execute Script Security protected scripts to execute arbitrary code. Published: 2019-08-07T14:20:24.000Z Updated: 2024-08-04T22:17:20.571Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2019/08/07/1 https://jenkins.io/security/advisory/2019-08-07/#SECURITY-922	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.