Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override that runs without sandbox protection.
References
| Link | Resource |
|---|---|
| https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3466 | Vendor Advisory |
Configurations
History
03 Oct 2025, 00:56
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jenkins
Jenkins shared Library Version Override |
|
| CPE | cpe:2.3:a:jenkins:shared_library_version_override:*:*:*:*:*:jenkins:*:* | |
| References | () https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3466 - Vendor Advisory |
Information
Published : 2024-11-13 21:15
Updated : 2025-10-03 00:56
NVD link : CVE-2024-52554
Mitre link : CVE-2024-52554
CVE.ORG link : CVE-2024-52554
JSON object : View
Products Affected
jenkins
- shared_library_version_override
CWE
CWE-862
Missing Authorization