Jenkins Plugin Security Advisory: Auth Bypass, XSS, XXE, Session Fixation
Security Advisory
SA-CORE-2024-11-13
High
Jenkins
Affected:
- Script Security Plugin < 1365.1367.va_3b_b_89f8a_95b_
- Pipeline: Groovy Plugin < 3975.3977.v478dd9e956c3
- Pipeline: Declarative Plugin < 2.2215
- Authorize Project Plugin <= 1.7.2
- OpenID Connect Authentication Plugin <= 4.418.vccc7061f5b_6d
Fixed in:
- Script Security Plugin >= 1365.1367.va_3b_b_89f8a_95b_
- Pipeline: Groovy Plugin >= 3975.3977.v478dd9e956c3
- Pipeline: Declarative Plugin >= 2.2215
- Authorize Project Plugin >= 1.7.3
- OpenID Connect Authentication Plugin >= 4.419
Referenced CVEs:
CVE-2024-52554
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from www.jenkins.io, cleaned by our LLM pipeline, and translated to English. View original.