Jenkins Project Jenkins OWASP ZAP Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins OWASP ZAP Plugin: 1 record(s), with affected versions and fixes.
CVE-2026-57301
High · 8.8
CWE-610 Jun 24, 2026
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins…
Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.