Jenkins / Script Security
35 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-57281 | jenkins-script-security-plugin: Jenkins Script Security Plugin: Arbitrary code execution outside sandbox | HIGH | 8.5 | Jun 24, 2026 |
| CVE-2026-57280 | jenkins-script-security-plugin: Jenkins Script Security Plugin: Sandbox bypass leading to arbitrary code execution | HIGH | 8.8 | Jun 24, 2026 |
| CVE-2026-42519 | Jenkins Script Security Plugin: Jenkins Script Security Plugin: Information disclosure via missing permission check | MEDIUM | 6.5 | Apr 29, 2026 |
| CVE-2024-52549 | jenkins-plugin/script-security: Jenkins Script Security Plugin File Disclosure Vulnerability | MEDIUM | 4.3 | Nov 13, 2024 |
| CVE-2024-34145 | jenkins-plugin/script-security: sandbox bypass via sandbox-defined classes | HIGH | 8.8 | May 2, 2024 |
| CVE-2024-34144 | jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies | CRITICAL | 9.8 | May 2, 2024 |
| CVE-2023-24422 | jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin | HIGH | 8.8 | Jan 24, 2023 |
| CVE-2022-45379 | jenkins-plugin/script-security: Whole-script approval in Script Security Plugin vulnerable to SHA-1 collisions | HIGH | 8.0 | Nov 15, 2022 |
| CVE-2022-43404 | jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin | CRITICAL | 9.9 | Oct 19, 2022 |
| CVE-2022-43403 | jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin | CRITICAL | 9.9 | Oct 19, 2022 |
| CVE-2022-43401 | jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin | CRITICAL | 9.9 | Oct 19, 2022 |
| CVE-2022-30946 | plugin: CSRF vulnerability in Script Security Plugin | MEDIUM | 4.3 | May 17, 2022 |
| CVE-2020-2279 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide craft… | CRITICAL | 9.9 | Sep 23, 2020 |
| CVE-2020-2190 | jenkins-script-security-plugin: cross-site scripting vulnerability due to configure sandboxed scripts | MEDIUM | 5.4 | Jun 3, 2020 |
| CVE-2020-2135 | jenkins-script-security-plugin: sandbox protection bypass leads to arbitrary code execution | HIGH | 8.8 | Mar 9, 2020 |
| CVE-2020-2134 | jenkins-script-security-plugin: sandbox protection bypass via crafted constructor calls and crafted constructor bodies | HIGH | 8.8 | Mar 9, 2020 |
| CVE-2020-2110 | jenkins-script-security-plugin: sandbox protection bypass during script compilation phase by applying AST transforming annotations | HIGH | 8.8 | Feb 12, 2020 |
| CVE-2019-16538 | jenkins-script-security-plugin: sandbox protection bypass leads to execute arbitrary code in sandboxed scripts | HIGH | 8.8 | Nov 21, 2019 |
| CVE-2019-10431 | jenkins-script-security: Sandbox bypass vulnerability in Script Security Plugin | CRITICAL | 9.9 | Oct 1, 2019 |
| CVE-2019-10400 | jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute… | MEDIUM | 4.2 | Sep 12, 2019 |
| CVE-2019-10399 | jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrar… | MEDIUM | 4.2 | Sep 12, 2019 |
| CVE-2019-10394 | jenkins-script-security-plugin: handling of property names in property expressions on the left-hand side of assignment expression leads to execute arbitrary co… | MEDIUM | 4.2 | Sep 12, 2019 |
| CVE-2019-10393 | jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts | MEDIUM | 4.2 | Sep 12, 2019 |
| CVE-2019-10356 | jenkins-plugin-script-security: Sandbox bypass through method pointer expressions in Script Security Plugin | HIGH | 8.8 | Jul 31, 2019 |
| CVE-2019-10355 | jenkins-plugin-script-security: Sandbox bypass through type casts in Script Security Plugin | HIGH | 8.8 | Jul 31, 2019 |
Showing 1 to 25 of 35 CVEs