Jenkins插件安全公告: CVE-2025-47884至47889 (RCE/XSS/权限绕过)
Security AdvisoryCVE-2025-47884CriticalJenkins
Affected:
- OpenID Connect Provider Plugin
- Health Advisor by CloudBees Plugin
- Cadence vManager Plugin
- DingTalk Plugin
- WSO2 Oauth Plugin
Fixed in:
- Cadence vManager Plugin: 4.0.1-288.v8804b_ea_a_cb_7f
- Health Advisor by CloudBees Plugin: 374.376.v3a_41a_a_142efe
- OpenID Connect Provider Plugin: 111.v29d614b_3617
Referenced CVEs: CVE-2025-47889
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。