Jenkins Plugin Vulnerabilities: CSRF, Arbitrary File Read, Session Fixation (CVE-2018-1000600/601/602)
Security AdvisorySA-CORE-2018-001MediumJenkins
Affected:
- GitHub Plugin <= 1.29.2
- ssh-credentials Plugin <= 1.14
- saml Plugin <= 1.0.7
- AWS CodeBuild Plugin <= 0.26
- AWS CodeDeploy Plugin <= 1.19
Fixed in:
- GitHub Plugin >= 1.29.2
- SSH Credentials Plugin >= 1.14
- SAML Plugin >= 1.0.7
参照 CVE: CVE-2018-1000610
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。