Description

A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths.

INFO

Published Date :

2026-04-29T13:31:29.232Z

Last Modified :

2026-04-29T14:03:57.188Z

Source :

jenkins
AFFECTED PRODUCTS

The following products are affected by CVE-2026-42519 vulnerability.

Vendors Products
Jenkins Project
  • Jenkins Script Security Plugin
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-42519.

CVSS Vulnerability Scoring System