Jenkins Multiple Vulnerabilities
Release Date: 7 Mar 2025
RISK: Medium Risk
TYPE: Servers - Internet App Servers
Multiple vulnerabilities were identified in Jenkins. A remote attacker could exploit some of these vulnerabilities to trigger cross-site scripting and sensitive information disclosure on the targeted system.
Impact
- Cross-Site Scripting
- Information Disclosure
System / Technologies affected
- Jenkins weekly 2.499 and earlier
- Jenkins LTS 2.492.1 and earlier
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
沒有留言:
發佈留言