Vulnerabilidades do Jenkins Pipeline: Groovy
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Pipeline: Groovy: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:jenkins:pipeline:_groovy
CVE-2026-57284
Média · 4.3
CWE-470 24/06/2026
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the…
Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.
CVE-2026-57283
Média · 4.3
CWE-352 24/06/2026
Cross-Site Request Forgery (CSRF) em Jenkins Pipeline: Groovy
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.
CVE-2019-1003030
Crítica · 9.9
KEV Urgente · 78 Exploit público CWE-693 08/03/2019
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.