CVE-2024-52551

Summary

CVE-2024-52551 is a vulnerability affecting Jenkins Pipeline: Declarative Plugin version 2.2214.vb_b_34b_2ea_9b_83 and earlier. This issue allows users with Item/Build permissions to restart previously built projects, even if the associated Jenkinsfile script is no longer approved. Attackers can exploit this vulnerability to execute unapproved code during the build process, potentially leading to security compromises. Jenkins servers using outdated plugins are at risk, and administrators are advised to upgrade to a patched version as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.