Not rated
CVE-2022-43402 A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins…
Description
A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Pipeline: Groovy Plugin | Versions not published |
References
- www.jenkins.io www.jenkins.io
- [oss-security] 20221019 Multiple vulnerabilities in Jenkins plugins www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Jenkins Pipeline: Groovy Plugin
The 11 CVEs of Jenkins Pipeline: Groovy Plugin →
CVE-2026-57284
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated…
4.3
Medium
CVE-2026-57283
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier…
4.3
Medium
CVE-2024-52550
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether…
8.0
High
CVE-2022-30945
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath…
Not rated