-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:templating-engine | maven | < 2.5.4 | 2.5.4 |
The vulnerability stems from two key missing protections in library step execution:
These functions would appear in runtime profiles during exploitation as they directly handle library loading and script execution. The patch adds sandbox checks in both locations, confirming their role in the vulnerability.