Product · Jenkins Project

Jenkins Templating Engine Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.8

CVE-2025-31722 Public exploit

Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

Jenkins Project Jenkins Templating Engine Plugin org.jenkins-ci.plugins:templating-engine Web / CMS Maven

Apr 2, 2025