-
Bug
-
Resolution: Unresolved
-
Critical
Currently, any user can call System.exit() from the plugin (just click on the test button) => any user with job configure permissions may stop the Jenkins instance.
[JENKINS-24135] Use groovy-sandbox to avoid the impact on the system stability
Labels | New: failure security shutdown |
Priority | Original: Major [ 3 ] | New: Critical [ 2 ] |
Attachment | New: JENKINS-24135.png [ 26494 ] |
Workflow | Original: JNJira [ 157009 ] | New: JNJira + In-Review [ 179477 ] |
"Test" axis => service dies on the check