En resumen
- CVE-2025-24401 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a io.jenkins.plugins:folder-auth, folder-based authorization strategy (jenkins).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.32%, mayor que el 25.3% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
NVD description
Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
Más vulnerabilidades de io.jenkins.plugins:folder-auth
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free