Jenkins Templating Engine Plugin Vulnerable to Arbitrary Code Execution

高 8.8CVE-2025-31722 · GHSA-4vjp-327p-w4qv · 02/04/2025 公開 · 17/06/2026 更新

要点

CVE-2025-31722 は org.jenkins-ci.plugins:templating-engine, templating engine (jenkins) に影響する深刻度「高」 (CVSS 8.8) の脆弱性です。
今後30日間に悪用される確率（EPSS）：1.3%（全脆弱性の 70.7% より高い）。
対処：2.5.4 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
org.jenkins-ci.plugins:templating-engine Maven	`< 2.5.4`	`2.5.4`
templating engine jenkins	`< 2.5.4`	`2.5.4`

概要

Jenkins Templating Engine Plugin allows defining libraries both in the global configuration, as well as scoped to folders containing the pipelines using them. While libraries in the global configuration can only be set up by administrators and can therefore be trusted, libraries defined in folders can be configured by users with Item/Configure permission.

In Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection. This vulnerability allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

In Templating Engine Plugin 2.5.4, libraries defined in folders are subject to sandbox protection.

NVD の説明

In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.