Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:pipeline\:_groovy:3990.vd281dd77a_388:*:*:*:*:jenkins:*:*

part: a version: 3990.vd281dd77a_388 update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductPipeline: Groovy (6a3f05dd-763b-5c31-8365-0db8a5085b91)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52550 vulnerable 2026-06-08 06:52:16.053011 Details available
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.
Published: 2024-11-13T20:53:00.972Z
Updated: 2024-11-26T14:45:03.205Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.