Jenkins 2.473

CPE Details

Jenkins 2.473
jenkins
jenkins
2.473
2025-03-17
11h29 +00:00
2025-03-17
11h29 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:jenkins:jenkins:2.473:*:*:*:-:*:*:*

Informations

Vendor

jenkins

Product

jenkins

Version

2.473

Software Edition

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-47804 2024-10-02 15h35 +00:00 If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction.
4.3
Moyen
CVE-2024-47803 2024-10-02 15h35 +00:00 Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.
4.3
Moyen