Jenkins
Jenkins Security Advisory 2025-03-05
2025-03-05 Mar 5, 2025 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2025-03-05/. 4 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2025-03-05/
Are you credited here?
Sign in and claim your line: it is yours immediately, no review queue.
The name the vendor printed stays next to your handle for anyone to check against the advisory above,
and any member who thinks a claim is wrong can refute it.
Credited
4 lines
Showing 1–4 of 4
CVE-2025-27624
BR2025-0000-009240
SECURITY-3498
unclaimed
CSRF vulnerability
Credited as Antoine Ruffino, CloudBees, Inc.
CVE-2025-27622
BR2025-0000-009241
SECURITY-3495
unclaimed
Encrypted values of secrets stored in agent configuration revealed to users with Agent/Extended Read permission
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-27623
BR2025-0000-009242
SECURITY-3496
unclaimed
Encrypted values of secrets stored in view configuration revealed to users with View/Read permission
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-27625
BR2025-0000-009243
SECURITY-3501
unclaimed
Open redirect vulnerability
Credited as XBOW