Jenkins

Folder-based Authorization Strategy

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2025-24401

  • EPSS 0.07%
  • Published 22.01.2025 17:15:14
  • Last modified 03.10.2025 00:15:30

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage)...

4.8

CVE-2022-27200

  • EPSS 5.29%
  • Published 15.03.2022 17:15:10
  • Last modified 21.11.2024 06:55:23

Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer per...