description: Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository.
affected:
{
product: Jenkins Docker Commons Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1.17, status: affected, version: unspecified, versionType: custom
}