Jenkins Security Advisory 2023-01-24
Jenkins published a security advisory dated 2023-01-24 listing 22 Jenkins plugins as affected. The text provided names the plugins only and gives no vulnerability descriptions, severity ratings or fixed versions.
What changes for platform teams
Teams running Jenkins should check whether any of the listed plugins are installed and follow the advisory for fixed versions, which the source text does not include. Plugins affected include authentication and credential plugins such as Keycloak Authentication, Kubernetes Credentials Provider and Script Security.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules