org.jenkinsci.plugins.spoonscript/spoonscript vulnerabilities

Latest org.jenkinsci.plugins.spoonscript/spoonscript CVEs

Newest publication first

1. CVE-2023-30532 Lack of authentication mechanism in Jenkins TurboScript Plugin webhook

   Published 2023-04-12

   Medium·CVSS 6.5 EPSS 0.57%

   A missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.