从这个网页截图中,可以获取到以下关于漏洞的关键信息: 1. 漏洞编号和CVE编号: - SECURITY-3451 / CVE-2024-47803 - SECURITY-3448 / CVE-2024-47804 - SECURITY-3373 / CVE-2024-47805 - SECURITY-3441 (1) / CVE-2024-47806 - SECURITY-3441 (2) / CVE-2024-47807 2. 漏洞描述: - Exposure of multi-line secrets through error messages in Jenkins - Item creation restriction bypass vulnerability in Jenkins - Encrypted values of credentials revealed to users with Extended Read permission in Credentials Plugin - Lack of audience claim validation in OpenId Connect Authentication Plugin - Lack of issuer claim validation in OpenId Connect Authentication Plugin 3. 受影响的版本: - Jenkins weekly - Jenkins LTS - Credentials Plugin - OpenId Connect Authentication Plugin 4. 修复措施: - 更新到指定版本的Jenkins和插件。 5. 严重性: - Medium - High 6. 报告者: - Antonio Muñiz, CloudBees, Inc. - James Nord, CloudBees, Inc. - Kevin Guerroudj, CloudBees, Inc. - Olivier Lamy, CloudBees, Inc. 这些信息可以帮助用户了解漏洞的详细情况、受影响的版本以及如何修复这些问题。