PT-2026-51793 · Jenkins · Jenkins Pipeline: Groovy Plugin

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-57283

Mitre

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-57283

Produtos afetados

Jenkins Pipeline: Groovy Plugin

Referências · 2

• https://jenkins.io/security/advisory/2026-06-24/#SECURITY-3677 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-57283 · Nota de Segurança