تنبيه Jenkins

أصدرت Jenkins تحديثًا لمعالجة ثغرة في المنتجات التالية:

Credentials Plugin up to and including 1111.v35a_307992395
CVS Plugin up to and including 2.19
Extended Choice Parameter Plugin up to and including 346.vd87693c5a_86c
Gerrit Trigger Plugin up to and including 2.35.2
Git Parameter Plugin up to and including 0.9.15
Google Compute Engine Plugin up to and including 4.3.8
Jira Plugin up to and including 3.7
Job Generator Plugin up to and including 1.22
Mask Passwords Plugin up to and including 3.0
Node and Label parameter Plugin up to and including 1.10.3
Pipeline: Shared Groovy Libraries Plugin up to and including 564.ve62a_4eb_b_e039
promoted builds Plugin up to and including 873.v6149db_d64130
Publish Over FTP Plugin up to and including 1.16
Subversion Plugin up to and including 2.15.3

يمكن للمهاجم استغلال الثغرات وتنفيذ ما يلي:

يوصي المركز بتحديث النسخ المتأثرة، حيث أصدرت Jenkins توضيحًا لهذه التحديثات: