CVE-2024-52551

8.0 highEPSS 0.6%

High (8.0) in jenkins pipeline\. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in org.jenkinsci.plugins:pipeline-model-parent 2.2218.v56d0cda.

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2024-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jenkins:pipeline\

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-p2qq-c693-q53w	Maven	org.jenkinsci.plugins:pipeline-model-parent	<2.2218.v56d0cda	2.2218.v56d0cda

References

https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361

Check your stack JSON