GCVE - cpe:2.3:a:jenkins:pipeline\:_groovy:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:pipeline\:_groovy:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Pipeline: Groovy (`6a3f05dd-763b-5c31-8365-0db8a5085b91`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-52550`	vulnerable	2026-06-08 06:52:16.051769	Details available Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. Published: 2024-11-13T20:53:00.972Z Updated: 2024-11-26T14:45:03.205Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43402`	vulnerable	2026-06-08 05:49:31.780727	Details available A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM. Published: 2022-10-19T00:00:00.000Z Updated: 2024-08-03T13:32:58.640Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20%281%29 http://www.openwall.com/lists/oss-security/2022/10/19/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30945`	vulnerable	2026-06-08 05:43:39.861006	Details available Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines. Published: 2022-05-17T14:05:37.000Z Updated: 2024-08-03T07:03:40.031Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359 http://www.openwall.com/lists/oss-security/2022/05/17/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25180`	vulnerable	2026-06-08 05:41:45.492503	Details available Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier includes password parameters from the original build in replayed builds, allowing attackers with Run/Replay permission to obtain the values of password parameters passed to previous builds of a Pipeline. Published: 2022-02-15T16:11:02.000Z Updated: 2024-08-03T04:36:06.394Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2443	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25176`	vulnerable	2026-06-08 05:41:45.491149	Details available Jenkins Pipeline: Groovy Plugin 2648.va9433432b33c and earlier follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file (typically Jenkinsfile) for Pipelines, allowing attackers able to configure Pipelines to read arbitrary files on the Jenkins controller file system. Published: 2022-02-15T16:10:55.000Z Updated: 2024-10-15T17:14:05.406Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2613	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25173`	vulnerable	2026-06-08 05:41:45.486155	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2109`	vulnerable	2026-06-08 05:24:58.907519	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003041`	vulnerable	2026-06-08 05:12:21.452652	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003030`	vulnerable	2026-06-08 05:12:21.438172	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003001`	vulnerable	2026-06-08 05:12:21.383018	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-1000866`	vulnerable	2026-06-08 05:10:26.141449	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1000096`	vulnerable	2026-06-08 05:08:33.928313	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.