Jenkins Plugin Vulnerabilities: Info Leak, SMTP Injection, Privilege Escalation (CVE-2025-58458/7962/58459/58460)
Security Advisory
SA-CORE-2025-003
Medium
Jenkins
Affected:
- Git client Plugin <= 6.3.2
- Jakarta Mail API Plugin <= 2.1.3-2
- global-build-stats Plugin <= 3.22.v22f4db_18e2dd
- OpenTelemetry Plugin <= 3.1543.v8446b_92b_c6d6
Fixed in:
- Git client Plugin: 6.3.3
- global-build-stats Plugin: 3.47.v32a_eb_0493c4f
- Jakarta Mail API Plugin: 2.1.3-3
- OpenTelemetry Plugin: 3.1543.1545.vf5a_4ec123769
参照 CVE:
CVE-2025-58459
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。