Security Advisory

CVE-2026-57283

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-24 13:20:05
Last updated 2026-06-24 14:01:20
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.