CVE-2025-31722

このリポジトリには README がありません。...

Exploit for Code Injection in Jenkins Templating_Engine

CVE-2025-31722 — Jenkins Templating Engine RCE For educat...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

creationtimestamp| type| source ---|---|--- 2025-04-02 17:33:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10135 2025-04-02 19:09:58+00:00| seen| https://t.me/cvedetector/21881 2025-04-02 19:48:24+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114270096822737774...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM...

CVE-2025-31722

The Jenkins Templating Engine (JTE) plugin (versions 2.5.3 and earlier ) is vulnerable to a sandbox bypass leading to Arbitrary Code Execution (RCE) . The root cause is that libraries defined in folders are not subject to sandbox protection; specifically, the injectPrimitives() function fails to ...