Jenkins Pipeline
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_pipeline:_groovy_plugin:*:*:*:*:*:*:*:*
part: a version: _groovy_plugin update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Pipeline (f575b609-c686-543c-aacb-c3c480aae6f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57284 |
vulnerable | 2026-07-29 01:00:29.548562 |
Details available
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.
Published: 2026-06-24T13:20:06.419Z
Updated: 2026-06-24T13:59:13.717Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-57283 |
vulnerable | 2026-07-29 01:00:29.548403 |
Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.
Published: 2026-06-24T13:20:05.863Z
Updated: 2026-06-24T14:01:20.564Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52550 |
vulnerable | 2026-06-08 06:52:16.050993 |
Details available
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.
Published: 2024-11-13T20:53:00.972Z
Updated: 2024-11-26T14:45:03.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43402 |
not_vulnerable | 2026-06-08 05:49:31.778627 |
Details available
A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.
Published: 2022-10-19T00:00:00.000Z
Updated: 2024-08-03T13:32:58.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30945 |
vulnerable | 2026-06-08 05:43:39.859887 |
Details available
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.
Published: 2022-05-17T14:05:37.000Z
Updated: 2024-08-03T07:03:40.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25180 |
vulnerable | 2026-06-08 05:41:45.492475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25176 |
vulnerable | 2026-06-08 05:41:45.491102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25173 |
vulnerable | 2026-06-08 05:41:45.484837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2109 |
vulnerable | 2026-06-08 05:24:58.906280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003041 |
vulnerable | 2026-06-08 05:12:21.452620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1003030 |
vulnerable | 2026-06-08 05:12:21.438117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.