4.3
Medium
CVE-2026-57284 Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated…
Description
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Pipeline: Groovy Plugin 4331 | earliest → 4331.v9d06ed4658ff | No fix stated |
References
- Jenkins Security Advisory 2026-06-24 www.jenkins.io
Timeline
- Published
- Last modified
Other CVEs of Jenkins Pipeline: Groovy Plugin
The 11 CVEs of Jenkins Pipeline: Groovy Plugin →
CVE-2026-57283
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier…
4.3
Medium
CVE-2024-52550
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether…
8.0
High
CVE-2022-43402
A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins…
Not rated
CVE-2022-30945
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath…
Not rated