JS
Product
Jenkins Script Security Plugin
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 5High 13Medium 4Low 0
Watch
Add Jenkins Script Security Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1003029 In wildKEV | 9.9 | Mar 8 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Affected: 1.53 and earlier |
| CVE-2022-43403 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43401 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43404 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2024-34144 | 9.8 | May 2 | A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define… Affected: through 1335.vf07d9ce377a_e |
Showing 5