SS
Product
Script Security
On CISA KEVExploited in the wild
45
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 25Medium 12Low 0
Watch
Add Script Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1003029 In wildKEV | 9.9 | Mar 8 | Jenkins Script Security Plugin Sandbox Bypass Vulnerability Affected: through 1.53 |
| CVE-2022-43401 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43403 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2022-43404 | 9.9 | Oct 19 | A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451… Affected: through 1183.v774b_0b_0a_a_451 |
| CVE-2020-2279 | 9.9 | Sep 23 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.74 and earlier allows attackers with permission to define sandboxed scripts to provide crafted return values or… Affected: through 1.74 |
| CVE-2019-10431 | 9.9 | Oct 1 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.64 and earlier related to the handling of default parameter expressions in constructors allowed attackers to… Affected: through 1.64 |
| CVE-2024-34144 | 9.8 | May 2 | A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define… Affected: through 1335.vf07d9ce377a_e |
| CVE-2019-1003040 | 9.8 | Mar 28 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.55 and earlier allows attackers to invoke arbitrary constructors in sandboxed scripts Affected: through 1.55 |
| CVE-2026-92125 | 8.8 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attackers with permission to define and run… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92124 | 8.8 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a collection that a sandboxed script… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92123 | 8.8 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, property and attribute accesses, and… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92122 | 8.8 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed script coerces a value to an… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-57280 | 8.8 | Jun 24 | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy… Affected: through 1402.v94c9ce464861 |
| CVE-2024-34145 | 8.8 | May 2 | A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier… Affected: through 1335.vf07d9ce377a_e |
| CVE-2023-24422 | 8.8 | Jan 26 | A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run… Affected: before 1229.v4880b_b_e905a_6 |
| CVE-2020-2135 | 8.8 | Mar 9 | Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted method calls on objects that implement GroovyInterceptable Affected: through 1.70 |
| CVE-2020-2134 | 8.8 | Mar 9 | Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies Affected: through 1.70 |
| CVE-2020-2110 | 8.8 | Feb 12 | Sandbox protection in Jenkins Script Security Plugin 1.69 and earlier could be circumvented during the script compilation phase by applying AST transforming annotations to imports… Affected: through 1.69 |
| CVE-2019-16538 | 8.8 | Nov 21 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.67 and earlier related to the handling of default parameter expressions in closures allowed attackers to execute… Affected: through 1.67 |
| CVE-2019-10356 | 8.8 | Jul 31 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of method pointer expressions allowed attackers to execute arbitrary code… Affected: through 1.61 |
| CVE-2019-10355 | 8.8 | Jul 31 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling of type casts allowed attackers to execute arbitrary code in sandboxed… Affected: through 1.61 |
| CVE-2019-1003024 | 8.8 | Feb 20 | A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.52 and earlier in RejectASTTransformsCustomizer.java that allows attackers with Overall/Read permission… Affected: through 1.52 |
| CVE-2019-1003005 | 8.8 | Feb 6 | A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in… Affected: through 1.50 |
| CVE-2019-1003000 | 8.8 | Jan 22 | A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that… Affected: through 1.49 |
| CVE-2018-1000865 | 8.8 | Dec 10 | A sandbox bypass vulnerability exists in Script Security Plugin 1.47 and earlier in groovy-sandbox/src/main/java/org/kohsuke/groovy/sandbox/SandboxTransformer.java that allows… Affected: through 1.47 |
| CVE-2017-1000107 | 8.8 | Oct 5 | Script Security Plugin did not apply sandboxing restrictions to constructor invocations via positional arguments list, super constructor invocations, method references, and type… Affected: 1.30 |
| CVE-2026-92126 | 8.5 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an arbitrary class, allowing attackers… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92127 | 8.0 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when a user with Overall/Administer… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92129 | 7.5 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to a class at runtime, allowing attackers… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-92128 | 7.5 | Sep 16 | Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the… Affected: through 1415.v9a_f9b_3a_c253d |
| CVE-2026-57281 | 7.5 | Jun 24 | Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run… Affected: through 1402.v94c9ce464861 |
| CVE-2022-45379 | 7.5 | Nov 15 | Jenkins Script Security Plugin 1189.vb_a_b_7c8fd5fde and earlier stores whole-script approvals as the SHA-1 hash of the script, making it vulnerable to collision attacks Affected: before 1190.v65867a_a_47126 |
| CVE-2016-3102 | 7.3 | Feb 9 | The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access… Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +13 more |
| CVE-2017-1000505 | 6.5 | Jan 25 | In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to… Affected: through 1.36 |
| CVE-2017-1000095 | 6.5 | Oct 5 | The default whitelist included the following unsafe entries: DefaultGroovyMethods.putAt(Object, String, Object); DefaultGroovyMethods.getAt(Object, String) Affected: 1.34 |
| CVE-2020-2190 | 5.4 | Jun 3 | Jenkins Script Security Plugin 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page, resulting in a stored… Affected: through 1.72 |
| CVE-2026-84659 | 4.3 | Sep 2 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the… Affected: through 1412.v7737b_3405f86 |
| CVE-2026-84658 | 4.3 | Sep 2 | Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier uses the `@DataBoundConstructor` annotation on a constructor that loads script approval configuration, allowing… Affected: through 1412.v7737b_3405f86 |
| CVE-2026-42519 | 4.3 | Apr 29 | A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script… Affected: through 1399.ve6a_66547f6e1 |
| CVE-2024-52549 | 4.3 | Nov 13 | Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method… Affected: before 1362.1364.v4cf2dc5d8776; 1366.vd44b_49a_5c85c before 1367.vdf2fc45f229c; 1365.v4778ca_84b_de5 |
| CVE-2022-30946 | 4.3 | May 17 | A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier allows attackers to have Jenkins send an HTTP request to an… Affected: before 1172.v35f6a_0b_8207e |
| CVE-2019-10400 | 4.2 | Sep 12 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving… Affected: through 1.62 |
| CVE-2019-10399 | 4.2 | Sep 12 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions in increment and decrement… Affected: through 1.62 |
| CVE-2019-10394 | 4.2 | Sep 12 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of property names in property expressions on the left-hand side of… Affected: through 1.62 |
| CVE-2019-10393 | 4.2 | Sep 12 | A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of method names in method call expressions allowed attackers to execute… Affected: through 1.62 |
Showing 45