Jenkins Project 厂商相关 1545 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
Jenkins 是一款广泛使用的开源自动化服务器,核心用途为支持持续集成与持续交付(CI/CD)流程。截至最新统计,该项目已收录 1473 条 CVE,历史上常见漏洞类型包括远程代码执行(RCE)、跨站脚本(XSS)及权限绕过等,多源于插件缺陷或配置不当。其安全特性强调插件生态管理,重大事件涉及多次因默认配置或旧版本组件引发的严重数据泄露风险,建议用户定期更新并严格审查插件权限。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-50770 | Jenkins OpenId Connect Authentication Plugin 安全漏洞 — Jenkins OpenId Connect Authentication Plugin | 7.8AI | HighAI | 2023-12-13 |
| CVE-2023-50769 | Jenkins Nexus Platform Plugin 安全漏洞 — Jenkins Nexus Platform Plugin | 6.5AI | MediumAI | 2023-12-13 |
| CVE-2023-50768 | Jenkins Nexus Platform Plugin 安全漏洞 — Jenkins Nexus Platform Plugin | 8.8AI | HighAI | 2023-12-13 |
| CVE-2023-50767 | Jenkins Nexus Platform Plugin 安全漏洞 — Jenkins Nexus Platform Plugin | 8.1AI | HighAI | 2023-12-13 |
| CVE-2023-50766 | Jenkins Nexus Platform Plugin 安全漏洞 — Jenkins Nexus Platform Plugin | 8.1AI | HighAI | 2023-12-13 |
| CVE-2023-50765 | Jenkins Scriptler Plugin 安全漏洞 — Jenkins Scriptler Plugin | 6.5AI | MediumAI | 2023-12-13 |
| CVE-2023-50764 | Jenkins Scriptler Plugin 安全漏洞 — Jenkins Scriptler Plugin | 6.5AI | MediumAI | 2023-12-13 |
| CVE-2023-49674 | Jenkins NeuVector Vulnerability Scanner Plugin 安全漏洞 — Jenkins NeuVector Vulnerability Scanner Plugin | 6.5 | - | 2023-11-29 |
| CVE-2023-49673 | Jenkins Plugin NeuVector Vulnerability Scanner Plugin 安全漏洞 — Jenkins NeuVector Vulnerability Scanner Plugin | 8.1 | - | 2023-11-29 |
| CVE-2023-49656 | Jenkins MATLAB Plugin 安全漏洞 — Jenkins MATLAB Plugin | 7.1 | - | 2023-11-29 |
| CVE-2023-49655 | Jenkins MATLAB Plugin 安全漏洞 — Jenkins MATLAB Plugin | 8.8 | - | 2023-11-29 |
| CVE-2023-49654 | Jenkins Plugin MATLAB 安全漏洞 — Jenkins MATLAB Plugin | 8.8 | - | 2023-11-29 |
| CVE-2023-49653 | Jenkins Plugin Jira 安全漏洞 — Jenkins Jira Plugin | 6.5 | - | 2023-11-29 |
| CVE-2023-49652 | Jenkins Google Compute Engine Plugin 安全漏洞 — Jenkins Google Compute Engine Plugin | 4.3 | - | 2023-11-29 |
| CVE-2023-46660 | Jenkins Plugin Zanata 安全漏洞 — Jenkins Zanata Plugin | 5.3 | - | 2023-10-25 |
| CVE-2023-46659 | Jenkins Plugin Edgewall Trac 跨站脚本漏洞 — Jenkins Edgewall Trac Plugin | 5.4 | - | 2023-10-25 |
| CVE-2023-46658 | Jenkins Plugin MSTeams Webhook Trigger 安全漏洞 — Jenkins MSTeams Webhook Trigger Plugin | 5.3 | - | 2023-10-25 |
| CVE-2023-46657 | Jenkins Plugin Gogs 安全漏洞 — Jenkins Gogs Plugin | 5.3 | - | 2023-10-25 |
| CVE-2023-46656 | Jenkins Plugin Multibranch Scan Webhook Trigger 安全漏洞 — Jenkins Multibranch Scan Webhook Trigger Plugin | 5.3 | - | 2023-10-25 |
| CVE-2023-46654 | Jenkins Plugin CloudBees CD 后置链接漏洞 — Jenkins CloudBees CD Plugin | 8.1 | - | 2023-10-25 |
| CVE-2023-46655 | Jenkins Plugin CloudBees CD 后置链接漏洞 — Jenkins CloudBees CD Plugin | 6.5 | - | 2023-10-25 |
| CVE-2023-46653 | Jenkins Plugin lambdatest-automation 安全漏洞 — Jenkins lambdatest-automation Plugin | 4.3 | - | 2023-10-25 |
| CVE-2023-46652 | Jenkins Plugin lambdatest-automation 安全漏洞 — Jenkins lambdatest-automation Plugin | 4.3 | - | 2023-10-25 |
| CVE-2023-46651 | Jenkins Plugin Warnings 安全漏洞 — Jenkins Warnings Plugin | 6.5 | - | 2023-10-25 |
| CVE-2023-46650 | Jenkins Plugin GitHub 跨站脚本漏洞 — Jenkins GitHub Plugin | 5.4 | - | 2023-10-25 |
| CVE-2023-43498 | Jenkins 安全漏洞 — Jenkins | 8.1 | - | 2023-09-20 |
| CVE-2023-43502 | Jenkins Plugin Build Failure Analyzer 跨站请求伪造漏洞 — Jenkins Build Failure Analyzer Plugin | 4.3 | - | 2023-09-20 |
| CVE-2023-43501 | Jenkins Plugin Build Failure Analyzer 安全漏洞 — Jenkins Build Failure Analyzer Plugin | 6.5 | - | 2023-09-20 |
| CVE-2023-43499 | Jenkins Plugin Build Failure Analyzer 跨站脚本漏洞 — Jenkins Build Failure Analyzer Plugin | 5.4 | - | 2023-09-20 |
| CVE-2023-43500 | Jenkins Plugin Build Failure Analyzer 跨站请求伪造漏洞 — Jenkins Build Failure Analyzer Plugin | 8.1 | - | 2023-09-20 |
本页汇总了 Jenkins Project 厂商截至目前公开的全部 1545 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。