Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
10 Oct 2025, 15:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:jenkins:pipeline\:_groovy:3990.vd281dd77a_388:*:*:*:*:jenkins:*:* cpe:2.3:a:jenkins:pipeline\:_groovy:*:*:*:*:*:jenkins:*:* |
|
| References | () https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362 - Vendor Advisory | |
| First Time |
Jenkins
Jenkins pipeline\ |
Information
Published : 2024-11-13 21:15
Updated : 2025-10-10 15:29
NVD link : CVE-2024-52550
Mitre link : CVE-2024-52550
CVE.ORG link : CVE-2024-52550
JSON object : View
Products Affected
jenkins
- pipeline\
CWE
CWE-354
Improper Validation of Integrity Check Value