Jenkins Security Advisory: Unauth Info Disclosure & XSS in Dashboard, Cobaltium, Agent Approval Plugins

Jenkins Security Advisory 2024-10-28 Vulnerability Overview This security advisory addresses vulnerabilities in multiple Jenkins plugins, including: 1. Jenkins Dashboard View Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 2. Jenkins Cobaltium Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 3. Jenkins Agent Approval Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 4. Jenkins Link Following Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 5. Jenkins Run Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 6. Jenkins XSS Plugin: Contains a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts. 7. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 8. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 9. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 10. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 11. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 12. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 13. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 14. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 15. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 16. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 17. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 18. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 19. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 20. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 21. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 22. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 23. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 24. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 25. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 26. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 27. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 28. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 29. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 30. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 31. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 32. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 33. Jenkins Build Monitor Plugin: Contains an information disclosure vulnerability that allows unauthorized users to access sensitive information. 34. Jenkins Build Monitor Plugin

Goal Reached Thanks to every supporter — we hit 100%!

Jenkins Security Advisory: Unauth Info Disclosure & XSS in Dashboard, Cobaltium, Agent Approval Plugins