Folder-based Authorization Strategy (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2025-01-22. Vendor: Jenkins.

CVEs of Folder-based Authorization Strategy

• CVE-2025-24401 - CVSS 6.8 (medium), 2025-01-22: Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled,…
• CVE-2022-27200 - CVSS 4.8 (medium), 2022-03-15: Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored…