CVE-2024-34147

The Jenkins Telegram Bot Plugin (version 1.4.0 and earlier ) stores the Telegram Bot token in plaintext within the global configuration file jenkinsci.plugins.telegrambot.TelegramBotGlobalConfiguration.xml on the Jenkins controller. Consequently, any user with access to the Jenkins controller fil...

Jenkins plugins Multiple Vulnerabilities (2024-05-02)

According to their self-reported version numbers, the version of Jenkins plugins running on the remote web server are affected by multiple vulnerabilities: - High Script Security Plugin provides a sandbox feature that allows low privileged users to define scripts, including Pipelines, that are...