Aller au contenu
Se connecter
8.8 Élevée

CVE-2025-31722 In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox…

Description

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

Produits et versions touchés

Produit Versions touchées Corrigé en
Jenkins Templating Engine Plugin 2.5 premières → 2.5.3 Pas de correctif indiqué

Autres CVE de Jenkins Templating Engine Plugin

Les 2 CVE de Jenkins Templating Engine Plugin →
CVE-2021-21646 Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security… Non notée
Suivre cette CVE