4.3
Moyenne
CVE-2026-57284 Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated…
Description
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Pipeline: Groovy Plugin 4331 | premières → 4331.v9d06ed4658ff | Pas de correctif indiqué |
Références
- Jenkins Security Advisory 2026-06-24 www.jenkins.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de Jenkins Pipeline: Groovy Plugin
Les 11 CVE de Jenkins Pipeline: Groovy Plugin →
CVE-2026-57283
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier…
4.3
Moyenne
CVE-2024-52550
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether…
8.0
Élevée
CVE-2022-43402
A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins…
Non notée
CVE-2022-30945
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath…
Non notée