Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361 | Vendor Advisory |
Configurations
History
08 Oct 2025, 20:39
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361 - Vendor Advisory | |
| First Time |
Jenkins
Jenkins pipeline\ |
|
| CPE | cpe:2.3:a:jenkins:pipeline\:_declarative:*:*:*:*:*:jenkins:*:* |
Information
Published : 2024-11-13 21:15
Updated : 2025-10-08 20:39
NVD link : CVE-2024-52551
Mitre link : CVE-2024-52551
CVE.ORG link : CVE-2024-52551
JSON object : View
Products Affected
jenkins
- pipeline\
CWE
CWE-276
Incorrect Default Permissions