CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52549

Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files on the controller file system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.2%

CVSS Severity

CVSS v3 Score 4.3

References

https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3447

Products affected by CVE-2024-52549

Jenkins » Script Security » Version: 1.0

cpe:2.3:a:jenkins:script_security:1.0
Jenkins » Script Security » Version: 1.1

cpe:2.3:a:jenkins:script_security:1.1
Jenkins » Script Security » Version: 1.10

cpe:2.3:a:jenkins:script_security:1.10
Jenkins » Script Security » Version: 1.11

cpe:2.3:a:jenkins:script_security:1.11
Jenkins » Script Security » Version: 1.12

cpe:2.3:a:jenkins:script_security:1.12
Jenkins » Script Security » Version: 1.13

cpe:2.3:a:jenkins:script_security:1.13
Jenkins » Script Security » Version: 1.14

cpe:2.3:a:jenkins:script_security:1.14
Jenkins » Script Security » Version: 1.15

cpe:2.3:a:jenkins:script_security:1.15
Jenkins » Script Security » Version: 1.16

cpe:2.3:a:jenkins:script_security:1.16
Jenkins » Script Security » Version: 1.17

cpe:2.3:a:jenkins:script_security:1.17
Jenkins » Script Security » Version: 1.18

cpe:2.3:a:jenkins:script_security:1.18
Jenkins » Script Security » Version: 1.18.1

cpe:2.3:a:jenkins:script_security:1.18.1
Jenkins » Script Security » Version: 1.19

cpe:2.3:a:jenkins:script_security:1.19
Jenkins » Script Security » Version: 1.2

cpe:2.3:a:jenkins:script_security:1.2
Jenkins » Script Security » Version: 1.20

cpe:2.3:a:jenkins:script_security:1.20
Jenkins » Script Security » Version: 1.21

cpe:2.3:a:jenkins:script_security:1.21
Jenkins » Script Security » Version: 1.22

cpe:2.3:a:jenkins:script_security:1.22
Jenkins » Script Security » Version: 1.23

cpe:2.3:a:jenkins:script_security:1.23
Jenkins » Script Security » Version: 1.24

cpe:2.3:a:jenkins:script_security:1.24
Jenkins » Script Security » Version: 1.25

cpe:2.3:a:jenkins:script_security:1.25
Jenkins » Script Security » Version: 1.26

cpe:2.3:a:jenkins:script_security:1.26
Jenkins » Script Security » Version: 1.27

cpe:2.3:a:jenkins:script_security:1.27
Jenkins » Script Security » Version: 1.28

cpe:2.3:a:jenkins:script_security:1.28
Jenkins » Script Security » Version: 1.29

cpe:2.3:a:jenkins:script_security:1.29
Jenkins » Script Security » Version: 1.29.1

cpe:2.3:a:jenkins:script_security:1.29.1
Jenkins » Script Security » Version: 1.3

cpe:2.3:a:jenkins:script_security:1.3
Jenkins » Script Security » Version: 1.30

cpe:2.3:a:jenkins:script_security:1.30
Jenkins » Script Security » Version: 1.31

cpe:2.3:a:jenkins:script_security:1.31
Jenkins » Script Security » Version: 1.32

cpe:2.3:a:jenkins:script_security:1.32
Jenkins » Script Security » Version: 1.33

cpe:2.3:a:jenkins:script_security:1.33
Jenkins » Script Security » Version: 1.34

cpe:2.3:a:jenkins:script_security:1.34
Jenkins » Script Security » Version: 1.35

cpe:2.3:a:jenkins:script_security:1.35
Jenkins » Script Security » Version: 1.36

cpe:2.3:a:jenkins:script_security:1.36
Jenkins » Script Security » Version: 1.37

cpe:2.3:a:jenkins:script_security:1.37
Jenkins » Script Security » Version: 1.38

cpe:2.3:a:jenkins:script_security:1.38
Jenkins » Script Security » Version: 1.39

cpe:2.3:a:jenkins:script_security:1.39
Jenkins » Script Security » Version: 1.4

cpe:2.3:a:jenkins:script_security:1.4
Jenkins » Script Security » Version: 1.40

cpe:2.3:a:jenkins:script_security:1.40
Jenkins » Script Security » Version: 1.41

cpe:2.3:a:jenkins:script_security:1.41
Jenkins » Script Security » Version: 1.42

cpe:2.3:a:jenkins:script_security:1.42
Jenkins » Script Security » Version: 1.43

cpe:2.3:a:jenkins:script_security:1.43
Jenkins » Script Security » Version: 1.44

cpe:2.3:a:jenkins:script_security:1.44
Jenkins » Script Security » Version: 1.44.1

cpe:2.3:a:jenkins:script_security:1.44.1
Jenkins » Script Security » Version: 1.45

cpe:2.3:a:jenkins:script_security:1.45
Jenkins » Script Security » Version: 1.46

cpe:2.3:a:jenkins:script_security:1.46
Jenkins » Script Security » Version: 1.46.1

cpe:2.3:a:jenkins:script_security:1.46.1
Jenkins » Script Security » Version: 1.47

cpe:2.3:a:jenkins:script_security:1.47
Jenkins » Script Security » Version: 1.48

cpe:2.3:a:jenkins:script_security:1.48
Jenkins » Script Security » Version: 1.49

cpe:2.3:a:jenkins:script_security:1.49
Jenkins » Script Security » Version: 1.5

cpe:2.3:a:jenkins:script_security:1.5
Jenkins » Script Security » Version: 1.50

cpe:2.3:a:jenkins:script_security:1.50
Jenkins » Script Security » Version: 1.51

cpe:2.3:a:jenkins:script_security:1.51
Jenkins » Script Security » Version: 1.52

cpe:2.3:a:jenkins:script_security:1.52
Jenkins » Script Security » Version: 1.53

cpe:2.3:a:jenkins:script_security:1.53
Jenkins » Script Security » Version: 1.54

cpe:2.3:a:jenkins:script_security:1.54
Jenkins » Script Security » Version: 1.54.1

cpe:2.3:a:jenkins:script_security:1.54.1
Jenkins » Script Security » Version: 1.54.2

cpe:2.3:a:jenkins:script_security:1.54.2
Jenkins » Script Security » Version: 1.54.3

cpe:2.3:a:jenkins:script_security:1.54.3
Jenkins » Script Security » Version: 1.54.4

cpe:2.3:a:jenkins:script_security:1.54.4
Jenkins » Script Security » Version: 1.55

cpe:2.3:a:jenkins:script_security:1.55
Jenkins » Script Security » Version: 1.56

cpe:2.3:a:jenkins:script_security:1.56
Jenkins » Script Security » Version: 1.57

cpe:2.3:a:jenkins:script_security:1.57
Jenkins » Script Security » Version: 1.57.1

cpe:2.3:a:jenkins:script_security:1.57.1
Jenkins » Script Security » Version: 1.57.2

cpe:2.3:a:jenkins:script_security:1.57.2
Jenkins » Script Security » Version: 1.57.3

cpe:2.3:a:jenkins:script_security:1.57.3
Jenkins » Script Security » Version: 1.57.4

cpe:2.3:a:jenkins:script_security:1.57.4
Jenkins » Script Security » Version: 1.57.5

cpe:2.3:a:jenkins:script_security:1.57.5
Jenkins » Script Security » Version: 1.57.6

cpe:2.3:a:jenkins:script_security:1.57.6
Jenkins » Script Security » Version: 1.58

cpe:2.3:a:jenkins:script_security:1.58
Jenkins » Script Security » Version: 1.59

cpe:2.3:a:jenkins:script_security:1.59
Jenkins » Script Security » Version: 1.6

cpe:2.3:a:jenkins:script_security:1.6
Jenkins » Script Security » Version: 1.60

cpe:2.3:a:jenkins:script_security:1.60
Jenkins » Script Security » Version: 1.60.1

cpe:2.3:a:jenkins:script_security:1.60.1
Jenkins » Script Security » Version: 1.61

cpe:2.3:a:jenkins:script_security:1.61
Jenkins » Script Security » Version: 1.62

cpe:2.3:a:jenkins:script_security:1.62
Jenkins » Script Security » Version: 1.63

cpe:2.3:a:jenkins:script_security:1.63
Jenkins » Script Security » Version: 1.63.1

cpe:2.3:a:jenkins:script_security:1.63.1
Jenkins » Script Security » Version: 1.64

cpe:2.3:a:jenkins:script_security:1.64
Jenkins » Script Security » Version: 1.65

cpe:2.3:a:jenkins:script_security:1.65
Jenkins » Script Security » Version: 1.66

cpe:2.3:a:jenkins:script_security:1.66
Jenkins » Script Security » Version: 1.66.1

cpe:2.3:a:jenkins:script_security:1.66.1
Jenkins » Script Security » Version: 1.66.2

cpe:2.3:a:jenkins:script_security:1.66.2
Jenkins » Script Security » Version: 1.66.3

cpe:2.3:a:jenkins:script_security:1.66.3
Jenkins » Script Security » Version: 1.66.4

cpe:2.3:a:jenkins:script_security:1.66.4
Jenkins » Script Security » Version: 1.66.5

cpe:2.3:a:jenkins:script_security:1.66.5
Jenkins » Script Security » Version: 1.67

cpe:2.3:a:jenkins:script_security:1.67
Jenkins » Script Security » Version: 1.68

cpe:2.3:a:jenkins:script_security:1.68
Jenkins » Script Security » Version: 1.69

cpe:2.3:a:jenkins:script_security:1.69
Jenkins » Script Security » Version: 1.7

cpe:2.3:a:jenkins:script_security:1.7
Jenkins » Script Security » Version: 1.70

cpe:2.3:a:jenkins:script_security:1.70
Jenkins » Script Security » Version: 1.71

cpe:2.3:a:jenkins:script_security:1.71
Jenkins » Script Security » Version: 1.72

cpe:2.3:a:jenkins:script_security:1.72
Jenkins » Script Security » Version: 1.73

cpe:2.3:a:jenkins:script_security:1.73
Jenkins » Script Security » Version: 1.74

cpe:2.3:a:jenkins:script_security:1.74
Jenkins » Script Security » Version: 1.75

cpe:2.3:a:jenkins:script_security:1.75
Jenkins » Script Security » Version: 1.76

cpe:2.3:a:jenkins:script_security:1.76
Jenkins » Script Security » Version: 1.77

cpe:2.3:a:jenkins:script_security:1.77
Jenkins » Script Security » Version: 1.78

cpe:2.3:a:jenkins:script_security:1.78
Jenkins » Script Security » Version: 1.78.1

cpe:2.3:a:jenkins:script_security:1.78.1
Jenkins » Script Security » Version: 1.8

cpe:2.3:a:jenkins:script_security:1.8
Jenkins » Script Security » Version: 1.9

cpe:2.3:a:jenkins:script_security:1.9
Jenkins » Script Security » Version: 1118.vba21ca2e3286

cpe:2.3:a:jenkins:script_security:1118.vba21ca2e3286
Jenkins » Script Security » Version: 1125.v132f99385e1b_

cpe:2.3:a:jenkins:script_security:1125.v132f99385e1b_
Jenkins » Script Security » Version: 1131.v8b_b_5eda_c328e

cpe:2.3:a:jenkins:script_security:1131.v8b_b_5eda_c328e
Jenkins » Script Security » Version: 1138.v8e727069a_025

cpe:2.3:a:jenkins:script_security:1138.v8e727069a_025
Jenkins » Script Security » Version: 1140.vf967fb_efa_55a_

cpe:2.3:a:jenkins:script_security:1140.vf967fb_efa_55a_
Jenkins » Script Security » Version: 1145.1148.vf6d17a_a_a_eef6

cpe:2.3:a:jenkins:script_security:1145.1148.vf6d17a_a_a_eef6
Jenkins » Script Security » Version: 1145.vb_cf6cf6ed960

cpe:2.3:a:jenkins:script_security:1145.vb_cf6cf6ed960
Jenkins » Script Security » Version: 1146.vdf547f19a_473

cpe:2.3:a:jenkins:script_security:1146.vdf547f19a_473
Jenkins » Script Security » Version: 1158.v7c1b_73a_69a_08

cpe:2.3:a:jenkins:script_security:1158.v7c1b_73a_69a_08
Jenkins » Script Security » Version: 1172.v35f6a_0b_8207e

cpe:2.3:a:jenkins:script_security:1172.v35f6a_0b_8207e
Jenkins » Script Security » Version: 1175.1177.vda_175b_77d144

cpe:2.3:a:jenkins:script_security:1175.1177.vda_175b_77d144
Jenkins » Script Security » Version: 1175.1179.vea_f7532629e1

cpe:2.3:a:jenkins:script_security:1175.1179.vea_f7532629e1
Jenkins » Script Security » Version: 1175.v4b_d517d6db_f0

cpe:2.3:a:jenkins:script_security:1175.v4b_d517d6db_f0
Jenkins » Script Security » Version: 1183.v774b_0b_0a_a_451

cpe:2.3:a:jenkins:script_security:1183.v774b_0b_0a_a_451
Jenkins » Script Security » Version: 1184.v85d16b_d851b_3

cpe:2.3:a:jenkins:script_security:1184.v85d16b_d851b_3
Jenkins » Script Security » Version: 1189.vb_a_b_7c8fd5fde

cpe:2.3:a:jenkins:script_security:1189.vb_a_b_7c8fd5fde
Jenkins » Script Security » Version: 1209.v50b_005db_19db

cpe:2.3:a:jenkins:script_security:1209.v50b_005db_19db
Jenkins » Script Security » Version: 1218.v39ca_7f7ed0a_c

cpe:2.3:a:jenkins:script_security:1218.v39ca_7f7ed0a_c
Jenkins » Script Security » Version: 1228.vd93135a_2fb_25

cpe:2.3:a:jenkins:script_security:1228.vd93135a_2fb_25
Jenkins » Script Security » Version: 1229.v4880b_b_e905a_6

cpe:2.3:a:jenkins:script_security:1229.v4880b_b_e905a_6
Jenkins » Script Security » Version: 1335.vf07d9ce377a_e

cpe:2.3:a:jenkins:script_security:1335.vf07d9ce377a_e
Jenkins » Script Security » Version: 1365.v4778ca_84b_de5

cpe:2.3:a:jenkins:script_security:1365.v4778ca_84b_de5
Jenkins » Script Security » Version: 1366.vd44b_49a_5c85c

cpe:2.3:a:jenkins:script_security:1366.vd44b_49a_5c85c

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52549

Products

Pricing

Contact Us