CVE Feed

    Dashboard / CVE / CVE-2024-52550

    CVE-2024-52550

    Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved.

    Published:Nov 13, 2024
    Last Modified:Oct 10, 2025
    EPS:Nov 13, 2024
    EPSS Score:0.00021
    CVSS Score:8

    Affected Products

    Vendor
    Jenkins
    Product
    Groovy
    Vendor
    Jenkins
    Product
    Pipeline\
    Vendor
    Redhat
    Product
    Ocp Tools

    Exploits

    https://github.com/Anton-ai111/CVE-2024-52550

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High