Executive brief
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Affected products
- Maven org.jenkins-ci.plugins.workflow:workflow-cps
Junglewise Threat Intelligence
CVE-2024-52550: Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
CVE-2024-52550 · Severity: low · CVSS 3.1 · Published 2024-11-13
Technologies: org.jenkins-ci.plugins.workflow:workflow-cps (Maven). Vendors: Maven.
Related threats
- Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution
- Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
- Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin
- Improper Input Validation in Jenkins Pipeline: Groovy Plugin
- Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin