Jenkins多个插件安全公告: RCE/任意文件读取/CSRF漏洞汇总
Security AdvisoryUnknownJenkins
Affected:
- LDAP Plugin <= 807.v7d7de30930cf
- Active Directory Plugin <= 2.41
- Email Extension Plugin <= 1933.v45cec755423f
- Pipeline: Groovy Libraries Plugin <= 797.v90ea_a_9b_e45a_0
- Credentials Binding Plugin <= 720.v3f6decef43ea_
Fixed in:
- Active Directory Plugin 2.41.1
Referenced CVEs: CVE-2026-48927
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 www.jenkins.io 自动抓取,经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。