Jenkins Multiple Plugins: Unauth Info Disclosure & XSS Security Advisory

Jenkins Security Advisory 2024-10-28 Vulnerability Overview This security advisory addresses vulnerabilities in multiple Jenkins plugins, including: 1. Jenkins Dashboard View plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 2. Jenkins Cobaltium plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 3. Jenkins Agent Approval plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 4. Jenkins Link View plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 5. Jenkins Run Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 6. Jenkins XSS plugin: Contains a Cross-Site Scripting (XSS) vulnerability allowing attackers to inject malicious scripts. 7. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 8. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 9. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 10. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 11. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 12. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 13. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 14. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 15. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 16. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 17. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 18. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 19. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 20. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 21. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 22. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 23. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 24. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 25. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 26. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 27. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 28. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 29. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 30. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 31. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 32. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 33. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive information. 34. Jenkins Build Monitor plugin: Contains an information disclosure vulnerability allowing unauthorized users to access sensitive infor

Goal Reached Thanks to every supporter — we hit 100%!

Jenkins Multiple Plugins: Unauth Info Disclosure & XSS Security Advisory