CVE-2019-10357: Jenkins Pipeline:shared Groovy Libraries

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

A missing permission check in Jenkins Pipeline: Shared Groovy Libraries Plugin 2.14 and earlier allowed users with Overall/Read access to obtain limited information about the content of SCM repositories referenced by global libraries.

Affected products

• Jenkins Pipeline:shared Groovy Libraries: up to and including 2.14
• Red Hat Openshift Container Platform: version 3.11 only; version 4.1 only

Published 2019-07-31. Last modified 2026-06-17.