Lucene search
+L

1 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2026/06/24 12:00 a.m.•25 views

Missing permission check in mcp-server allows reading Pipeline replay scripts

mcp-server 0.177.v629fdb2557fe and earlier does not perform a permission check in the getReplayScripts MCP tool that returns the replay script of a Pipeline build. This allows attackers with Item/Read permission to obtain the Pipeline script of jobs. mcp-server 0.178.vffe5ae770f3b requires...

4.3CVSS5.9AI score0.00281EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder