CVE-2025-31722

The Jenkins Templating Engine (JTE) plugin (version 2.5.3 and earlier ) contains a sandbox bypass vulnerability. The root cause is that libraries defined in folders are not subject to sandbox protection, unlike those in global configurations. An attacker with Item/Configure permissions can create...

CVE-2021-21646

The CVE-2021-21646 entry concerns the Jenkins Templating Engine Plugin, version 2.1 and earlier. The underlying issue is failure to protect pipeline configurations with the Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the Jenkins controller...