Package · Maven

org.jenkins-ci.plugins:zapper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.8

CVE-2026-57301

Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with Item/Configure permission to execute arbitrary code on the Jenkins controller.

Jenkins Project Jenkins OWASP ZAP Plugin org.jenkins-ci.plugins:zapper Web / CMS Maven

Jun 24, 2026