Jenkins Azure CLI Plugin Shell Command Injection Vulnerability

A shell command injection vulnerability exists in the Jenkins Azure CLI Plugin in versions through 0.9. The plugin does not properly restrict the commands executed on the Jenkins controller. This flaw allows attackers with Item/Configure permission to execute arbitrary shell commands on the controller.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shell commands on the Jenkins controller, potentially allowing attackers to manipulate the system or access sensitive information.