Jenkins多插件安全公告：LDAP重定向RCE/文件读取/XSS等
Security AdvisoryJenkins Security Advisory 2026-05-27HighJenkins
Affected:
- LDAP Plugin 807.v7d7de30930cf and earlier
- Active Directory Plugin 2.41 and earlier
- Email Extension Plugin 1933.v45cec755423f and earlier
- Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier
- Credentials Binding Plugin 720.v3f6decef43ea_ and earlier
Fixed in:
- LDAP Plugin 807.809.vd3a_4e5e4ec98
- Active Directory Plugin 2.41.1
- Email Extension Plugin 1933.1935.v276319e3cc47
- Pipeline: Groovy Libraries Plugin 798.v5cc688825312
- Credentials Binding Plugin 725.ve52b_2328a_fde
Referenced CVEs: CVE-2026-48923
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.jenkins.io 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。