Jenkins Pipeline: Groovy vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Pipeline: Groovy: 3 record(s), with affected versions and fixes.cpe:2.3:a:jenkins:pipeline:_groovy
CVE-2026-57284
Medium · 4.3
CWE-470 Jun 24, 2026
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the…
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.
CVE-2026-57283
Medium · 4.3
CWE-352 Jun 24, 2026
Cross-Site Request Forgery (CSRF) in Jenkins Pipeline: Groovy
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.
CVE-2019-1003030
Critical · 9.9
KEV Urgent · 78 Public exploit CWE-693 Mar 8, 2019
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.