Jenkins Official Owasp Zap vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Official Owasp Zap: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:official_owasp_zap

CVE-2026-57301 High · 8.8 CWE-610 Jun 24, 2026

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins…

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.