description: Sandbox protection in Jenkins Pipeline: Groovy Plugin 2.78 and earlier can be circumvented through default parameter expressions in CPS-transformed methods.
affected:
{
product: Jenkins Pipeline: Groovy Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 2.78, status: affected, version: unspecified, versionType: custom
}