Em resumo
- CVE-2025-24401 é uma vulnerabilidade MÉDIO (CVSS 6.8) que afeta io.jenkins.plugins:folder-auth, folder-based authorization strategy (jenkins).
- Chance de exploração nos próximos 30 dias (EPSS): 0.32%, maior que 25.3% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
NVD description
Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.
Mais vulnerabilidades de io.jenkins.plugins:folder-auth
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free