| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.main:jenkins-core | ≥ 2.90, < 2.107< 2.89.4 | 2.1072.89.4 |
| jenkins | ≤ 2.106≤ 2.89.3 | |
| communications cloud native core automated test suite | = 1.9.0 |
An improper input validation vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to access plugin resource files in the META-INF and WEB-INF directories that should not be accessible, if the Jenkins home directory is on a case-insensitive file system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free