Skip to content
Sign in
8.8 High

CVE-2025-31722 In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox…

Description

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

Affected products and versions

Product Affected versions Fixed in
Jenkins Templating Engine Plugin 2.5 earliest → 2.5.3 No fix stated

Other CVEs of Jenkins Templating Engine Plugin

The 2 CVEs of Jenkins Templating Engine Plugin →
CVE-2021-21646 Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security… Not rated
Track this CVE