{"id":"CVE-2024-52551","aliases":["EUVD-2024-3288","GHSA-p2qq-c693-q53w","RHSA-2025:2218","RHSA-2025:2219","RHSA-2025:2220","RHSA-2025:2221","RHSA-2025:2222","RHSA-2025:2223"],"status":"published","title":"Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00587,"percentile":0.48553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276","CWE-285"],"published":"2024-11-13T20:53:01Z","modified":"2026-10-24T10:30:51Z","fixes":[{"ecosystem":"Maven","package":"org.jenkinsci.plugins:pipeline-model-parent","fixed_in":["2.2218.v56d0cda"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkinsci.plugins:pipeline-model-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2218.v56d0cda"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkinsci.plugins:pipeline-model-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2218.v56d0cda"}]}],"versions":["0.5","0.6","0.7","0.7.1","0.8","0.8.1","0.8.2","0.9","0.9.1","1.0","1.0.1","1.0.2","1.1","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.2","1.2-beta-2","1.2-beta-3","1.2-beta-4","1.2-beta-5","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","1.3","1.3.1","1.3.2","1.3.3","1.3.3.1","1.3.4","1.3.4.1","1.3.5","1.3.6","1.3.7","1.3.7-beta-1","1.3.8","1.3.9","1.4.0","1.4.0-beta1","1.4.0-beta3","1.4.0-beta4","1.4.0-beta5","1.5.0","1.5.0-beta1","1.5.0-rc1","1.5.1","1.6.0","1.7.0","1.7.1","1.7.2","1.8.0","1.8.1","1.8.2","1.8.3","1.8.4","1.8.5","1.9.0","1.9.1","1.9.2","1.9.3","2.2063.vb_1f41d1918e9","2.2064.v5eef7d0982b_e","2.2075.vce74e77b_ce40","2.2077.vc78ec45162f1","2.2081.v3919681ffc1e","2.2084.v1d2999534103","2.2086.v12b_420f036e5","2.2097.v33db_b_de764b_e","2.2114.v2654ca_721309","2.2118.v31fd5b_9944b_5","2.2121.vd87fb_6536d1e","2.2123.va_31cb_3b_80ef8","2.2125.vddb_a_44a_d605e","2.2131.vb_9788088fdb_5","2.2133.ve46a_6113dfc3","2.2141.v5402e818a_779","2.2144.v077a_d1928a_40","2.2150.v4cfd8916915c","2.2151.ve32c9d209a_3f","2.2168.vf921b_4e72c73","2.2169.vee7cd0efc13e","2.2175.v76a_fff0a_2618","2.2183.vb_36481468374","2.2184.v0b_358b_953e69","2.2188.v26e255fd2984","2.2198.v41dd8ef6dd56","2.2203.v89fa_170c2b_f5","2.2205.vc9522a_9d5711","2.2214.vb_b_34b_2ea_9b_83"]},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.17::el9","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1739859586-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.17::el9","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.17.1739859908-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.16::el9","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1739896390-3.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.16::el9","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.1739896683-1.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1740051993-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.15::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.15.1740052174-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1740109575-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.14::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.1740109868-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1740464433-3.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.13::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.13.1740464698-1.el8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.479.3.1740464431-3.el8"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:ocp_tools:4.12::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.1740464689-1.el8"}]}],"bundled":6}],"products":[{"vendor":"jenkins","product":"pipeline\\"},{"vendor":"jenkins project","product":"jenkins pipeline: declarative plugin"},{"vendor":"jenkins_project","product":"jenkins_pipeline_declaratrive_plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3361","tags":["vendor-advisory","Vendor Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52551","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p2qq-c693-q53w"},{"url":"https://github.com/jenkinsci/pipeline-model-definition-plugin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2218","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2324606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2326047","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2218.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47072","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47072","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47072","tags":["advisory"]},{"url":"https://github.com/x-stream/xstream/commit/bb838ce2269cac47433e31c77b2b236466e9f266","tags":["article"]},{"url":"https://github.com/x-stream/xstream/security/advisories/GHSA-hfq9-hggm-c56q","tags":["article"]},{"url":"https://x-stream.github.io/CVE-2024-47072.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47855","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47855","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47855","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wwcp-26wc-3fxm","tags":["advisory"]},{"url":"https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e","tags":["article"]},{"url":"https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52549","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52549","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52549","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3447","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52550","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52550","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52550","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2024-11-13/#SECURITY-3362","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-52551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-52551","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2219","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2219.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2220","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2220.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2221","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2221.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2222","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2222.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:2223","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2223.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-45339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2342463","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-45339","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45339","tags":["advisory"]},{"url":"https://github.com/golang/glog/pull/74","tags":["article"]},{"url":"https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2","tags":["article"]},{"url":"https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs","tags":["article"]},{"url":"https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File","tags":["article"]},{"url":"https://pkg.go.dev/vuln/GO-2025-3372","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-52551","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.","status":"published","published":"2024-11-13T20:53:01.666Z","modified":"2024-11-14T15:05:27.789Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:03.333404Z"}],"euvd":[{"id":"EUVD-2024-3288","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.","status":"published","published":"2024-11-13T20:53:01Z","modified":"2024-11-14T15:05:27Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:00.76838Z"}],"ghsa":[{"id":"GHSA-p2qq-c693-q53w","title":"Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin ","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. This allows attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. Pipeline: Declarative Plugin 2.2218.v56d0cda_37c72 refuses to restart a build whose main (Jenkinsfile) script is unapproved.\n","status":"published","published":"2024-11-13T21:30:38Z","modified":"2024-11-14T22:45:14Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276","CWE-285"],"updated_at":"2026-11-02T14:38:19.029049Z"}],"nvd":[{"id":"CVE-2024-52551","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.","status":"published","published":"2024-11-13T21:15:29.35Z","modified":"2026-06-17T08:07:26.463Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:10:37.281254Z"}],"osv":[{"id":"CVE-2024-52551","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved.","status":"published","published":"2024-11-13T21:15:29.35Z","modified":"2026-10-24T10:30:51.276839286Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"GHSA-p2qq-c693-q53w","title":"Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin ","description":"Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. This allows attackers with Item/Build permission to restart a previous build whose (Jenkinsfile) script is no longer approved. Pipeline: Declarative Plugin 2.2218.v56d0cda_37c72 refuses to restart a build whose main (Jenkinsfile) script is unapproved.\n","status":"published","published":"2024-11-13T21:30:38Z","modified":"2024-11-14T23:20:56.178332Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276","CWE-285"],"updated_at":"2026-11-02T15:46:52.534897Z"},{"id":"RHSA-2025:2218","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.17 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:11Z","modified":"2026-10-09T10:15:30Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:2219","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.16 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:11Z","modified":"2026-10-09T10:15:31Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:2220","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:12Z","modified":"2026-10-09T10:15:32Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:2221","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:12Z","modified":"2026-10-09T10:15:32Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:2222","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:13Z","modified":"2026-10-09T10:15:33Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:2223","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","status":"published","published":"2025-03-05T10:03:13Z","modified":"2026-10-09T10:15:34Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"}]}}