Vulnerability Intelligence Report
CVE-2022-30945
Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath of Jenkins and Jenkins plugins in sandboxed pipelines.
No Active Exploit Signals
CVSS Base Score
8.5
HIGH
EPSS Probability:1.24%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Jenkins project | Jenkins Pipeline: Groovy Plugin | unspecified <= 2689.v434009a_31b_f1 (affected), 2683.2687.vb_0cc3f973f06 (unaffected), 2.94.4 (unaffected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.244%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Jenkins Project · Open Source · USA |
| Reserved | 2022-05-16T00:00:00 |
| Published | 2022-05-17T14:05:37 |
| Last Updated | 2024-08-03T07:03:40 |
Community Chatter & Buzz