CVE-2024-52554

Summary

CVE-2024-52554 is a vulnerability affecting the Jenkins Shared Library Version Override Plugin version 17.v786074c9fce7 and earlier. This issue allows attackers with Item/Configure permissions on a folder to configure a folder-scoped library override that bypasses the Script Security sandbox, executing the code without sandbox protection. This vulnerability poses a significant risk as it enables attackers to run malicious scripts and potentially compromise the Jenkins environment. It is crucial that users of the affected plugin update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.