Jenkins is a very important component of the CI/CD pipeline in a DevOps environment and mainly works as an automation server. The primary task of Jenkins is to provide continuous integration and facilitate continuous delivery in the software development process. Jenkins can be integrated with version management systems such as GitHub. In a typical scenario, Jenkins would fetch code uploaded to GitHub, build it, and then deploy it in a production environment. To learn more about Jenkins, see https://www.cloudbees.com/jenkins/about.
Jenkins offers options to provide custom build commands and arguments within its build console. These commands are sent directly to the shell of the operating system (OS). In such a scenario, we can inject malicious code into the build commands to compromise the server running Jenkins, getting access to the...
