CVE-2019-1003030 Scanner
CVE-2019-1003030 Scanner - Deserialization of Untrusted Data vulnerability in Jenkins Pipeline Groovy Plugin
Used 2.4k times · 3.4k assets checked · url
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2019-1003030
9.9
CVSScritical
Exploitable remotely over the internet · low-privilege account sufficient.
Description
A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
jenkins pipeline: groovy plugin
Updated Oct 23, 2026View on NVD →
S4E scanner
CVE history: jenkins pipeline: groovy plugin
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →