Groovy (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2024-11-13. Vendor: Jenkins.

CVEs of Groovy

• CVE-2024-52550 - CVSS 8 (high), 2024-11-13: Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a…
• CVE-2019-1003033 - CVSS 8.8 (high), 2019-03-08: A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.1 and earlier in pom.xml, src/main/java/hudson/plugins/groovy/StringScriptSource.java that…
• CVE-2019-1003006 - CVSS 8.8 (high), 2019-02-06: A sandbox bypass vulnerability exists in Jenkins Groovy Plugin 2.0 and earlier in src/main/java/hudson/plugins/groovy/StringScriptSource.java that allows…