Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-24T13:20:05 jenkins-pipeline-groovy: Jenkins Pipeline: Groovy Plugin: Cross-site request forgery allows unauthorized configuration changes. 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CWE-940

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier allows attackers to instantiate types related to job or system configuration other than Pipeline steps through the Pipeline Snippet Generator.

A flaw was found in Jenkins Pipeline: Groovy Plugin. This cross-site request forgery (CSRF) vulnerability allows attackers to instantiate types related to job or system configuration. This could enable unauthorized modifications to the Jenkins environment.

OpenShift Developer Tools and Services Fix deferred jenkins-2-plugins OpenShift Developer Tools and Services Fix deferred ocp-tools-4/jenkins-rhel8 OpenShift Developer Tools and Services Fix deferred ocp-tools-4/jenkins-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-57283 https://nvd.nist.gov/vuln/detail/CVE-2026-57283 https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3677