CVE-2023-50764: Jenkins Scriptler

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint, allowing attackers with Scriptler/Configure permission to delete arbitrary files on the Jenkins controller file system.

Affected products

• Jenkins Scriptler: up to and including 342.v6a_89fd40f466

Published 2023-12-13. Last modified 2026-06-17.