CVE-2019-1003029

CVE-2019-1003029 describes a sandbox bypass in Jenkins Script Security Plugin (versions ≤ 1.53) that lets attackers with Overall/Read permission execute arbitrary code on the Jenkins master JVM. Affected components are in the plugin’s Groovy sandbox: GroovySandbox.java and SecureGroovyScript.java...

CVE-2019-1003000

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.49 and earlier (specifically in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java). This flaw allows attackers capable of providing sandboxed scripts to execute arbitrary code on the Jenki...

CVE-2024-34144

The Jenkins Script Security Plugin (version 1335.vf07d9ce377a_e and earlier) is vulnerable to a sandbox bypass due to crafted constructor bodies. Attackers with permission to define and run sandboxed scripts, such as Pipelines, can leverage these bodies to invoke other constructors and construct ...

CVE-2022-45379

CVE-2022-45379 affects Jenkins Script Security Plugin: versions 1189.vb_a_b_7c8fd5fde and earlier store whole-script approvals as the SHA-1 hash of the script, making them susceptible to SHA-1 collision attacks. Affected product: Jenkins Script Security Plugin (1189.vb_a_b_7c8fd5fde and earlier)....

CVE-2024-34145

The Jenkins Script Security Plugin (version 1335.vf07d9ce377a and earlier) is vulnerable to a sandbox bypass due to sandbox-defined classes that shadow specific non-sandbox-defined classes. Attackers with permissions to define and run sandboxed scripts, such as Pipelines , can bypass protections ...

CVE-2024-52549

The Jenkins Script Security Plugin (version 1367.vdf2fc45f229c and earlier, excluding 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776 ) is vulnerable to a file disclosure issue. The root cause is a missing permission check in a method that implements form validation. This allows attacker...

CVE-2023-24422

CVE-2023-24422 affects Jenkins Script Security Plugin (versions up to 1228.vd93135a_2fb_25 and earlier). The vulnerability is a sandbox bypass in map constructors that lets attackers with permission to define and run sandboxed scripts (including Pipelines) execute arbitrary code in the Jenkins co...

CVE-2022-43403

CVE-2022-43403 is a sandbox bypass in Jenkins Script Security Plugin prior to 1183.v774b_0b_0a_a_451, where casting an array-like value to an array type enables sandboxed pipelines to execute arbitrary code in the Jenkins controller JVM. Affected component: Jenkins Script Security Plugin (version...

CVE-2022-43401

CVE-2022-43401 is a critical sandbox bypass in Jenkins Script Security Plugin (versions up to 1183.v774b_0b_0a_a_451 and earlier). The vulnerability stems from a sandbox bypass caused by various implicit casts performed by the Groovy language runtime, allowing attackers with permission to define ...

CVE-2020-2134

CVE-2020-2134 relates to the Jenkins Script Security Plugin (versions up to 1.70) where sandbox protections could be bypassed by crafted constructor calls and bodies, enabling arbitrary code execution in the Jenkins controller JVM. The issue is documented in public advisories (GHSA/GHSA-GJ3Q-P8CM...

CVE-2022-30946

CVE-2022-30946 is a CSRF vulnerability in Jenkins Script Security Plugin (affecting versions up to 1158.v7c1b_73a_69a_08 and earlier). An authenticated attacker can induce Jenkins to send an HTTP request to a attacker‑specified webserver, enabling malicious activity such as cross‑site scripting a...

CVE-2022-43404

CVE-2022-43404: A sandbox bypass in Jenkins Script Security Plugin (versions up to 1183.v774b_0b_0a_a_451 and earlier) allows authenticated/authorized users to bypass the sandbox and execute arbitrary code in the Jenkins controller JVM via crafted constructor bodies and calls to sandbox-generated...

CVE-2019-16538

CVE-2019-16538 is a sandbox bypass in Jenkins Script Security Plugin (1.67 and earlier) that allowed arbitrary code execution in sandboxed scripts. The issue is cited in multiple advisories (GHSA-62PM-MGRH-7P69 and RHSA-2020:3616/2737) and Red Hat OpenShift updates list the vulnerability as a fix...

CVE-2019-10394

CVE-2019-10394 affects Jenkins Script Security Plugin up to v1.62. The vulnerability stems from how property names are handled in left-hand-side property expressions, enabling arbitrary code execution in sandboxed scripts. Connected advisories (e.g., GHSA-HVMX-5HV4-F235 and Red Hat RHSA entries) ...

CVE-2019-10399

The CVE-2019-10399 entry concerns Jenkins Script Security Plugin (versions 1.62 and earlier). The root cause is in the handling of property names within property expressions in increment/decrement expressions, enabling attackers to execute arbitrary code within sandboxed scripts. The available co...

CVE-2020-2190

The CVE-2020-2190 issue affects Jenkins Script Security Plugin (1.72 and earlier): it stored XSS due to improper escaping of pending/approved classpath entries on the In-process Script Approval page. Impact is stored cross-site scripting on affected Jenkins pages. CVSS metrics indicate low (2.0) ...

CVE-2020-2135

Sandbox protection bypass in Jenkins Script Security Plugin (versions up to 1.70) can allow arbitrary code execution in sandboxed scripts. The root cause involves crafted constructor calls and bodies (SECURITY-582) and crafted method calls on objects implementing GroovyInterceptable. Mitigation: ...

CVE-2019-10431

CVE-2019-10431 relates to a sandbox bypass in Jenkins Script Security Plugin (versions 1.64 and earlier) where improper handling of default parameter expressions in constructors could allow an attacker to run arbitrary code in sandboxed scripts. The issue is described in the GitHub advisory GHSA-...

CVE-2020-2110

CVE-2020-2110 concerns the Jenkins Script Security Plugin (1.69 and earlier) where sandbox protection could be bypassed during script compilation by using AST transforming annotations on imports or inside other annotations. This vulnerability enables arbitrary code execution within sandboxed scri...

CVE-2019-1003005

CVE-2019-1003005 describes a sandbox bypass in Jenkins Script Security Plugin (versions 1.50 and earlier) where an attacker with Overall/Read permission can supply a Groovy script to an HTTP endpoint, potentially leading to arbitrary code execution on the Jenkins master JVM. Public references (in...

CVE-2019-1003040

The CVE-2019-1003040 entry covers a sandbox bypass in Jenkins Script Security Plugin (versions 1.55 and earlier). The underlying issue allows an attacker to invoke arbitrary constructors from sandboxed Groovy scripts, effectively bypassing sandbox protections. Documented as a security vulnerabili...

CVE-2019-10393

The CVE-2019-10393 entry concerns a sandbox bypass in Jenkins Script Security Plugin (version 1.62 and earlier). The connected documents describe a flaw in how method names are handled in method call expressions, which could allow an attacker to bypass the sandbox and execute arbitrary code withi...

CVE-2019-10400

The connected advisories identify a sandbox bypass in Jenkins Script Security Plugin affecting versions 1.62 and earlier, caused by improper handling of subexpressions in increment/decrement expressions not involving assignment. Impact: attackers could run arbitrary code within sandboxed Groovy s...

CVE-2018-1000865

CVE-2018-1000865 describes a sandbox bypass in Jenkins: Script Security Plugin 1.47 and earlier, via groovy-sandbox/SandboxTransformer.java, allows attackers with Job/Configure permission to run arbitrary code on the Jenkins master JVM if Groovy sandboxed plugins are installed. Connected referenc...

CVE-2017-1000505

In Jenkins Script Security Plugin versions 1.36 and earlier, users who can configure sandboxed Groovy scripts could abuse a Groovy type coercion to create new File objects from strings, enabling reading arbitrary files on the Jenkins master filesystem. The entry notes this type coercion is now tr...

CVE-2019-10355

CVE-2019-10355 is a sandbox bypass in the Jenkins Script Security Plugin (versions up to 1.61 and earlier) that lets attackers escape the sandbox by exploiting how type casts are handled, enabling arbitrary code execution in sandboxed Groovy scripts. The vulnerability affected the plugin used wit...

CVE-2019-10356

CVE-2019-10356 is a sandbox bypass in Jenkins Script Security Plugin 1.61 and earlier, related to handling of method pointer expressions that could allow an attacker to execute arbitrary code in sandboxed scripts. The vulnerability is referenced across multiple advisories (Red Hat RHSA for OpenSh...

CVE-2019-1003024

CVE-2019-1003024 affects Jenkins Script Security Plugin

CVE-2020-2279

CVE-2020-2279 describes a sandbox bypass in Jenkins Script Security Plugin (versions 1.74 and earlier). The vulnerability lets attackers with permission to define sandboxed scripts craft return values or script bindings that can lead to arbitrary code execution on the Jenkins controller JVM. The ...

CVE-2017-1000095

CVE-2017-1000095 concerns the Jenkins Script Security plugin where the default whitelist contains unsafe entries (DefaultGroovyMethods.putAt and DefaultGroovyMethods.getAt) that bypass sandbox restrictions (e.g., via currentBuild['rawBuild'] vs currentBuild.rawBuild) and allow accessing private d...

CVE-2026-57281

The Jenkins Script Security Plugin (version 1402.v94c9ce464861 and earlier) is vulnerable to a sandbox escape. The root cause is the plugin's failure to reject Groovy AST transformation annotations containing an extensions member . This flaw allows an attacker to execute sandboxed Groovy scripts ...

CVE-2026-42519

The Jenkins Script Security Plugin versions 1399.ve6a_66547f6e1 and earlier contain a missing permission check in an HTTP endpoint. This flaw allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths. To remediate this, users should upgrade to vers...

CVE-2017-1000107

CVE-2017-1000107 affects the Jenkins Script Security Plugin. The root cause is that sandboxing restrictions were not applied to constructor invocations via positional argument lists, super constructors, method references, or type coercion expressions, allowing potential bypass of sandbox protecti...

CVE-2026-57280

The Jenkins Script Security Plugin version 1402.v94c9ce464861 and earlier contains a vulnerability where it fails to intercept implicit type casts applied to elements of typed for-each loops in sandboxed Groovy scripts. This flaw allows an attacker to provide scripts that can invoke arbitrary con...

CVE-2016-3102

The CVE-2016-3102 issue affects the Jenkins Script Security plugin prior to 1.18.1, where a plugin that performs direct field access or get/set array operations could bypass the Groovy sandbox protection. Affected product: Jenkins Script Security plugin (versions

CVE-2026-92122

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) contains a sandbox bypass vulnerability. The root cause is a failure to validate methods called through a proxy created when a sandboxed script coerces a value to an interface; specifically, it does not check if the va...

CVE-2026-92124

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass due to improper handling of Groovy collection type casting . While the plugin correctly checks operations for elements read from a collection, it incorrectly performs the cast on the c...

CVE-2026-92127

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to an improper control of generation of code. The flaw allows the plugin to automatically approve classpath entries in an item configuration when a user with Overall/Administer permission copies the item ...

CVE-2026-92126

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) contains a sandbox bypass vulnerability. The plugin fails to reject @Builder annotations where the builderStrategy member refers to an arbitrary class. This allows an attacker with permission to define and run sandboxe...

CVE-2026-92128

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a TOCTOU (Time-of-Check to Time-of-Use) race condition. The plugin downloads a JAR file specified by a URL twice during script evaluation: it confirms the approval of the first download but loads the c...

CVE-2026-92125

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass because it fails to reject the @GroovyASTTransformationClass annotation. An attacker with permissions to define and run sandboxed scripts, such as Pipelines , can use this annotation t...

CVE-2026-92129

The Jenkins Script Security Plugin versions 1415.v9a_f9b_3a_c253d and earlier are vulnerable to a sandbox bypass. The plugin fails to check calls from sandboxed scripts to methods added dynamically to a class at runtime. This allows attackers with permission to define and run sandboxed scripts, s...

CVE-2026-92123

The Jenkins Script Security Plugin (version 1415.v9a_f9b_3a_c253d and earlier) is vulnerable to a sandbox bypass due to a failure to intercept operations performed on a null receiver , such as method calls, property/attribute accesses, and array accesses. Attackers with permission to define and r...

CVE-2026-84658

The Jenkins Script Security Plugin (versions 1412.v7737b_3405f86 and earlier) contains a vulnerability where a constructor used to load script approval configuration is incorrectly annotated with @DataBoundConstructor . This oversight in the Stapler web framework's data-binding mechanism allows a...

CVE-2026-84659

The Jenkins Script Security Plugin (version 1412.v7737b_3405f86 and earlier) fails to enforce a permission check in the method governing the "Force the use of the sandbox globally in the system" setting. This allows attackers to disable the global sandbox via Stapler data binding . To remediate t...