What is GHSA-2w2h-gwwj-fh3q?

GHSA-2w2h-gwwj-fh3q is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that...

Which CVE IDs does GHSA-2w2h-gwwj-fh3q cover?

GHSA-2w2h-gwwj-fh3q covers the following CVE IDs: CVE-2026-57284. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2w2h-gwwj-fh3q?

GHSA-2w2h-gwwj-fh3q has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-2w2h-gwwj-fh3qMediumCVSS 4.3

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that...

Vendor

GitHub Security Advisories

Published

June 24, 2026

Last Modified

June 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-57284 →

📋 Description

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-57284
https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3677
https://github.com/advisories/GHSA-2w2h-gwwj-fh3q