RHSA-2024:0778 Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update

🗓️ 30 Sep 2024 15:05:06Reported by GoogleType

osv

osv🔗 osv.dev👁 47 Views

Red Hat Jenkins Security Update

Reporter	Title	Published	Views	Family All 2034
zdt	Apache Commons Text 1.9 Remote Code Execution Exploit	21 Jan 202400:00	–	zdt
zdt	Jenkins 2.441 / LTS 2.426.3 Arbitrary File Read Exploit	29 Jan 202400:00	–	zdt
vulnersOsv	ai.deepsense:seahorse-executor-deeplang_2.11 (>=1.4.2 <=1.4.3), ai.h2o:h2o-persist-gcs (>=3.20.0.1 <=3.32.1.5) +1916 more potentially affected by CVE-2020-7692 via com.google.oauth-client:google-oauth-client (>=1.10.0-beta <=1.30.6)	3 Jul 202012:01	–	vulnersosv
vulnersOsv	au.csiro.pathling:fhir-server (>=5.3.1 <=6.4.2), au.org.consumerdatastandards:data-holder (>=2.3.0 <=2.4.1) +2594 more potentially affected by CVE-2023-20862 via org.springframework.security:spring-security-core (>=5.7.0 <=5.7.7)	19 Apr 202321:30	–	vulnersosv
vulnersOsv	app.keyconnect.api:keyconnect-api (=1.0.0), app.keyconnect:keyconnect-rippled-api (=1.0.0) +2677 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-compat (>=2.2.0 <=3.6.3)	16 Jun 202117:32	–	vulnersosv
vulnersOsv	com.entityassist:entity-assist (>=0.70.0.1 <=1.0.9.14-jre14), com.guicedee.activitymaster:geography-master (=1.1.1.8-jre16) +92 more potentially affected by CVE-2022-42889 via com.guicedee.services:commons-text (>=0.70.0.1 <=1.2.2.1-jre17)	13 Oct 202219:00	–	vulnersosv
vulnersOsv	com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0 <=2.54.0), com.compuware.jenkins:compuware-scm-downloader (>=1.6 <=2.0.5) +105 more potentially affected by CVE-2023-40337 via org.jenkins-ci.plugins:cloudbees-folder (>=4.0 <=6.815.v0dd5a_cb_40e0e)	16 Aug 202315:30	–	vulnersosv
vulnersOsv	com.amadeus.jenkins.plugins:workflow-cps-global-lib-http (>=2.33.0 <=2.54.0), com.compuware.jenkins:compuware-scm-downloader (>=1.6 <=2.0.5) +105 more potentially affected by CVE-2023-40338 via org.jenkins-ci.plugins:cloudbees-folder (>=4.0 <=6.815.v0dd5a_cb_40e0e)	16 Aug 202315:30	–	vulnersosv
vulnersOsv	africa.absa:inception-api (>=1.1.0 <=1.2.0), africa.absa:inception-codes-api (>=1.1.0 <=1.2.0) +7729 more potentially affected by CVE-2023-20860 via org.springframework:spring-webmvc (>=5.3.0 <=5.3.25)	28 Mar 202300:34	–	vulnersosv
vulnersOsv	cc.chensoul.nacos:nacos-distribution (=2.5.2), cn.sparrowmini:sparrow-org-service (=0.0.1) +625 more potentially affected by CVE-2023-20862 via org.springframework.security:spring-security-core (>=5.8.0 <=5.8.2)	19 Apr 202321:30	–	vulnersosv

Source	Link
access	www.access.redhat.com/errata/RHSA-2024:0778
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

30 Jun 2026 10:05Current

8.5High risk

Vulners AI Score8.5

CVSS 3.19.8

EPSS0.99999

red hat jenkins security update jenkins-2-plugins software