GCVE - cpe:2.3:a:jenkins:groovy:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:groovy:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Groovy (`82d9e42e-6517-5938-9d87-0d0a9599cb25`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jenkinsci/groovy-plugin`	purl2cpe	2026-06-01 10:14:09.805829

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-52550`	vulnerable	2026-06-08 06:52:16.050053	Details available Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. Published: 2024-11-13T20:53:00.972Z Updated: 2024-11-26T14:45:03.205Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003033`	vulnerable	2026-06-08 05:12:21.442766	Details available A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM. Published: 2019-03-08T21:00:00.000Z Updated: 2024-08-05T03:07:16.685Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-03-06/#SECURITY-1338 http://www.securityfocus.com/bid/107476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003006`	vulnerable	2026-06-08 05:12:21.393706	Details available A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM. Published: 2019-02-06T16:00:00.000Z Updated: 2024-09-16T20:21:57.957Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1293	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.