Jenkins project 厂商相关 1598 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Jenkins 是一款广泛使用的开源自动化服务器,核心用途为支持持续集成与持续交付(CI/CD)流程。截至最新统计,该项目已收录 1473 条 CVE,历史上常见漏洞类型包括远程代码执行(RCE)、跨站脚本(XSS)及权限绕过等,多源于插件缺陷或配置不当。其安全特性强调插件生态管理,重大事件涉及多次因默认配置或旧版本组件引发的严重数据泄露风险,建议用户定期更新并严格审查插件权限。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-32991 | Jenkins Plugin SAML Single Sign On(SSO)跨站请求伪造漏洞 — Jenkins SAML Single Sign On(SSO) Plugin | 8.8 | - | 2023-05-16 |
| CVE-2023-32989 | Jenkins Plugin Azure VM Agents 跨站请求伪造漏洞 — Jenkins Azure VM Agents Plugin | 8.8 | - | 2023-05-16 |
| CVE-2023-32990 | Jenkins Plugin Azure VM Agents 安全漏洞 — Jenkins Azure VM Agents Plugin | 8.1 | - | 2023-05-16 |
| CVE-2023-32988 | Jenkins Plugin Azure VM Agents 安全漏洞 — Jenkins Azure VM Agents Plugin | 4.3 | - | 2023-05-16 |
| CVE-2023-32986 | Jenkins Plugin File Parameter 安全漏洞 — Jenkins File Parameter Plugin | 6.5 | - | 2023-05-16 |
| CVE-2023-32987 | Jenkins Plugin Reverse Proxy Auth 跨站请求伪造漏洞 — Jenkins Reverse Proxy Auth Plugin | 8.1 | - | 2023-05-16 |
| CVE-2023-32985 | Jenkins Plugin Sidebar Link 路径遍历漏洞 — Jenkins Sidebar Link Plugin | 4.3 | - | 2023-05-16 |
| CVE-2023-32984 | Jenkins Plugin TestNG Results 跨站脚本漏洞 — Jenkins TestNG Results Plugin | 5.4 | - | 2023-05-16 |
| CVE-2023-32983 | Jenkins Plugin Ansible 安全漏洞 — Jenkins Ansible Plugin | 4.3 | - | 2023-05-16 |
| CVE-2023-32982 | Jenkins Plugin Ansible 安全漏洞 — Jenkins Ansible Plugin | 4.3 | - | 2023-05-16 |
| CVE-2023-32981 | Jenkins Plugin Pipeline Utility Steps 缓冲区错误漏洞 — Jenkins Pipeline Utility Steps Plugin | 5.5 | - | 2023-05-16 |
| CVE-2023-32980 | Jenkins Plugin Email Extension 跨站请求伪造漏洞 — Jenkins Email Extension Plugin | 5.4 | - | 2023-05-16 |
| CVE-2023-32979 | Jenkins Plugin Email Extension 安全漏洞 — Jenkins Email Extension Plugin | 4.3 | - | 2023-05-16 |
| CVE-2023-32978 | Jenkins Plugin LDAP 跨站请求伪造漏洞 — Jenkins LDAP Plugin | 8.8 | - | 2023-05-16 |
| CVE-2023-32977 | Jenkins Plugin Pipeline: Job 跨站脚本漏洞 — Jenkins Pipeline: Job Plugin | 5.4 | - | 2023-05-16 |
| CVE-2023-30532 | Jenkins Plugin TurboScript 安全漏洞 — Jenkins TurboScript Plugin | 6.5 | - | 2023-04-12 |
| CVE-2023-30531 | Jenkins Plugin Consul KV Builder 安全漏洞 — Jenkins Consul KV Builder Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30530 | Jenkins Plugin Consul KV Builder 安全漏洞 — Jenkins Consul KV Builder Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30529 | Jenkins Plugin Lucene-Search 跨站请求伪造漏洞 — Jenkins Lucene-Search Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30528 | Jenkins Plugin WSO2 Oauth 安全漏洞 — Jenkins WSO2 Oauth Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30527 | Jenkins Plugin WSO2 Oauth 安全漏洞 — Jenkins WSO2 Oauth Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30526 | Jenkins Plugin Report Portal 安全漏洞 — Jenkins Report Portal Plugin | 6.5 | - | 2023-04-12 |
| CVE-2023-30524 | Jenkins Plugin Report Portal 安全漏洞 — Jenkins Report Portal Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30525 | Jenkins Plugin Report Portal 跨站请求伪造漏洞 — Jenkins Report Portal Plugin | 8.8 | - | 2023-04-12 |
| CVE-2023-30523 | Jenkins Plugin Report Portal 安全漏洞 — Jenkins Report Portal Plugin | 4.3 | - | 2023-04-12 |
| CVE-2023-30522 | Jenkins Plugin Fogbugz 安全漏洞 — Jenkins Fogbugz Plugin | 6.5 | - | 2023-04-12 |
| CVE-2023-30520 | Jenkins Plugin Quay.io trigger 跨站脚本漏洞 — Jenkins Quay.io trigger Plugin | 5.4 | - | 2023-04-12 |
| CVE-2023-30521 | Jenkins Plugin Assembla merge request builder 安全漏洞 — Jenkins Assembla merge request builder Plugin | 7.5 | - | 2023-04-12 |
| CVE-2023-30519 | Jenkins Plugin Quay.io trigger 安全漏洞 — Jenkins Quay.io trigger Plugin | 7.5 | - | 2023-04-12 |
| CVE-2023-30518 | Jenkins Plugin Thycotic Secret Server 安全漏洞 — Jenkins Thycotic Secret Server Plugin | 4.3 | - | 2023-04-12 |
本页汇总了 Jenkins project 厂商截至目前公开的全部 1598 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。