| Package | Affected versions | Patched versions |
|---|---|---|
| jenkins | ≥ 2.421, ≤ 2.579≥ 2.426.1, ≤ 2.568.2 |
Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does not correctly perform permission checks in the Appearance configuration page, allowing attackers with Overall/Manage permission to modify Appearance configuration options they should not have access to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free