Jenkins JCasC Plugin Arbitrary File Overwrite Vulnerability Advisory

Jenkins Security Advisory 2024-10-28 Vulnerability Overview This security advisory addresses vulnerabilities in multiple Jenkins plugins, including: 1. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 2. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 3. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 4. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 5. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 6. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 7. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 8. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 9. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 10. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 11. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 12. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 13. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 14. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 15. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 16. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 17. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows an attacker to overwrite arbitrary files on a Jenkins instance via malicious configuration. - Affected Scope: All versions of the JCasC plugin. - Remediation: Upgrade to version 2.1183 or higher. 18. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability

Goal Reached Thanks to every supporter — we hit 100%!

Jenkins JCasC Plugin Arbitrary File Overwrite Vulnerability Advisory