Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Script Security Plugin — Jenkins Security Advisory 2024-05-02 Clear all filters
TI-2024-22598 CVE-2024-34145 · GHSA-2g4q-9vm9-9fw4

Authentication bypass by spoofing in Jenkins Script Security Plugin

Priority MEDIUM 42

A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to defi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01002 Published 2024-05-02 Partial fix · 1336.vf33a CWE-290
TI-2024-22597 CVE-2024-34144 · GHSA-v63g-v339-2673

Protection mechanism failure in Jenkins Script Security Plugin

Priority HIGH 79

A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define and run sandboxed scripts, including Pipeli…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.48361 Published 2024-05-02 Partial fix · 1336.vf33a CWE-693