Jenkins Security Advisory 2021-03-30
Jenkins published a security advisory dated 2021-03-30 listing seven affected plugins: Build With Parameters, Cloud Statistics, Extra Columns, Jabber (XMPP) notifier and control, OWASP Dependency-Track, REST List Parameter, and Team Foundation Server. The source text does not describe the vulnerabilities, their severity, or the fixed plugin versions.
What changes for platform teams
Platform teams running Jenkins should check whether any of the listed plugins are installed and review the advisory for affected and fixed versions. The source text does not give enough detail to say what action is required.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules