CVE-2025-59475

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...

CVE-2025-59475

Jenkins versions 2.527 and earlier, including LTS 2.516.2 and earlier, are vulnerable to a missing authorization check in the authenticated user profile dropdown menu . This flaw allows authenticated users who lack Overall/Read permissions to obtain limited information about the Jenkins configura...