BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Jenkins

Jenkins Security Advisory 2025-09-03

2025-09-03 Sep 3, 2025 Source: Vendor

Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2025-09-03/. 4 SECURITY issues listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.jenkins.io/security/advisory/2025-09-03/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

3 lines
All 3 CVEs 3 Additional recognition 0 Unclaimed only
Showing 1–3 of 3
CVE-2025-58459 BR2025-0000-008757 SECURITY-3535 unclaimed
Missing permission checks in global-build-stats Plugin allow enumerating graph IDs
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-58458 BR2025-0000-008758 SECURITY-3590 unclaimed
File system information disclosure vulnerability in Git client Plugin
Credited as Daniel Beck, CloudBees, Inc.
CVE-2025-58460 BR2025-0000-008759 SECURITY-3602 unclaimed
Missing permission check in OpenTelemetry Plugin allows capturing credentials
Credited as Kevin Guerroudj, CloudBees, Inc.