Jenkins Pipeline
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_pipeline:_shared_groovy_libraries_plugin:*:*:*:*:*:*:*:*
part: a version: _shared_groovy_libraries_plugin update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Pipeline (f575b609-c686-543c-aacb-c3c480aae6f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-29047 |
vulnerable | 2026-06-08 05:42:46.367036 |
Details available
Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requests (or equivalent), but not able to commit directly to the configured SCM, to effectively change the Pipeline behavior by changing the definition of a dynamically retrieved library in their pull request, even if the Pipeline is configured to not trust them.
Published: 2022-04-12T19:50:46.000Z
Updated: 2024-11-20T15:35:52.801Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25183 |
vulnerable | 2026-06-08 05:41:45.493596 |
Details available
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier uses the names of Pipeline libraries to create cache directories without any sanitization, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM using specially crafted library names if a global Pipeline library configured to use caching already exists.
Published: 2022-02-15T16:11:07.000Z
Updated: 2024-08-03T04:36:06.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25182 |
vulnerable | 2026-06-08 05:41:45.493303 |
Details available
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller JVM using specially crafted library names if a global Pipeline library is already configured.
Published: 2022-02-15T16:11:05.000Z
Updated: 2024-11-19T19:28:36.784Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25181 |
vulnerable | 2026-06-08 05:41:45.492893 |
Details available
A sandbox bypass vulnerability in Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM through crafted SCM contents, if a global Pipeline library already exists.
Published: 2022-02-15T16:11:03.000Z
Updated: 2024-08-03T04:36:05.788Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25178 |
vulnerable | 2026-06-08 05:41:45.491917 |
Details available
Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system.
Published: 2022-02-15T16:10:58.000Z
Updated: 2024-08-03T04:36:06.504Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25177 |
vulnerable | 2026-06-08 05:41:45.491539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25174 |
vulnerable | 2026-06-08 05:41:45.487330 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10357 |
vulnerable | 2026-06-08 05:12:23.205313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.