CVE-2022-30945

Published: May 17, 2022Modified: Jun 17, 2026

8.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 6.0

Source: NVD

Description

Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.

Affected (1)

Products: Jenkins: Pipeline\

Jenkins

1 product

Pipeline\

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jenkins Pipeline\	Before 2689.v434009a_31b_f1

References (4)

http://www.openwall.com/lists/oss-security/2022/05/17/8

Source: jenkinsci-cert@googlegroups.com

Mailing ListThird Party Advisory

https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359

Source: jenkinsci-cert@googlegroups.com

PatchVendor Advisory

http://www.openwall.com/lists/oss-security/2022/05/17/8

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-359

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.