Jenkins: Stored XSS vulnerability in node offline cause description

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-53441 · ADVISORY
• jenkinsci/jenkins commit 20041e8 · WEB
• jenkinsci/jenkins · PACKAGE
• jenkins.io/security/advisory/2026-06-10 · WEB

org.jenkins-ci.main:jenkins-core のその他の脆弱性

• CVE-2026-53442中 5.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job conf…
• CVE-2026-53440中 4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security…
• CVE-2026-53439中 4.3Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine ot…
• CVE-2026-53438中 4.3A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking I…
• CVE-2026-53437中 4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins…