Advisory Database
  • Advisories
  • Dependency Scanning
  1. maven
  2. ›
  3. org.jenkinsci.plugins/pipeline-model-parent
  4. ›
  5. CVE-2024-52551

CVE-2024-52551: Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

November 13, 2024 (updated November 14, 2024)

Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. This allows attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. Pipeline: Declarative Plugin 2.2218.v56d0cda_37c72 refuses to restart a build whose main (Jenkinsfile) script is unapproved.

References

  • github.com/advisories/GHSA-p2qq-c693-q53w
  • github.com/jenkinsci/pipeline-model-definition-plugin
  • nvd.nist.gov/vuln/detail/CVE-2024-52551
  • www.jenkins.io/security/advisory/2024-11-13/

Code Behaviors & Features

Detect and mitigate CVE-2024-52551 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions before 2.2218.v56d0cda

Fixed versions

  • 2.2218.v56d0cda

Solution

Upgrade to version 2.2218.v56d0cda or above.

Impact 8 HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Learn more about CVSS

Weakness

  • CWE-285: Improper Authorization

Source file

maven/org.jenkinsci.plugins/pipeline-model-parent/CVE-2024-52551.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:15:45 +0000.