Jenkins Templating Engine Plugin
Moderate fix1 remedy
cpe:2.3:a:jenkins:templating_engine:*:*:*:*:jenkins:*:*
Moderate fix1 remedy
- <= 2.5.3
Jenkins Templating Engine Plugin Script Security Sandbox Bypass Vulnerability
Vulnerability
Patched
A script security sandbox bypass vulnerability has been identified in the Jenkins Templating Engine Plugin versions through 2.5.3. Libraries defined in folders are not subject to sandbox protection, allowing users with Item/Configure permission to execute arbitrary code in the Jenkins controller JVM.
Impact
Exploitation of this vulnerability allows for arbitrary code execution in the context of the Jenkins controller JVM.
Remediation
Users of the Templating Engine Plugin should update to version 2.5.4, which applies the necessary sandbox protection to libraries defined in folders.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
3.1impact
7.5exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.