Jenkins Pipeline Utility Steps — known CVE vulnerabilities

Every CVE whose affected-product data names Jenkins Pipeline Utility Steps, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-32981 — CVSS 8.8 (high): An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted…
• CVE-2022-45381 — CVSS 8.1 (high): Jenkins Pipeline Utility Steps Plugin 2.13.1 and earlier does not restrict the set of enabled prefix interpolators and bundles versions of…