org.jenkins-ci.plugins:templating-engine

2 results · Feed

• High 8.8
  CVE-2025-31722 Public exploit

  Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

  In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

  Jenkins Project Jenkins Templating Engine Plugin org.jenkins-ci.plugins:templating-engine Web / CMS Maven
  Apr 2, 2025
• High 8.8
  CVE-2021-21646

  Remote code execution vulnerability in Jenkins Templating Engine Plugin

  Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

  Jenkins Project Jenkins Templating Engine Plugin org.jenkins-ci.plugins:templating-engine Web / CMS Maven
  Apr 21, 2021