Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-47885 · ADVISORY
• jenkinsci/cloudbees-jenkins-advisor-plugin commit 4b456b3 · WEB
• jenkinsci/cloudbees-jenkins-advisor-plugin · PACKAGE
• jenkins.io/security/advisory/2025-05-14 · WEB

org.jenkins-ci.plugins:cloudbees-jenkins-advisor のその他の脆弱性

• CVE-2020-2258中 4.3Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing att…
• CVE-2020-2094中 4.3A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to se…
• CVE-2020-2093高 8.8A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email w…