Threats tagged 'ghsa-5gc7-28q4-677m'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.3%	CVE-2026-92128Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice High7.5EPSS 0.3%2026-09-16GCVE DatabaseCVE-2026-92128 A vulnerability in Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier allows attackers who can define classpath entries to execute arbitrary code on the Jenkins controller JVM. This occurs because the plugin downloads a JAR file specified by URL twice, confirming approval on the first download and loading classpath entries from the second. EPSS 0.3%Report on CVE-2026-92128 Vulnerability CWE-494 #ghsa-5gc7-28q4-677m	GCVE Database	2026-09-16

Page 1 of 1