CVE-2025-31722
In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
Vendor
Product
CWE
Yayın Tarihi
2025-04-02 15:15:59
Güncelleme
2025-04-29 13:52:56
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-