Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2568▼ 310 respecto a la semana anterior

Críticas / altas1351▲ 96 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-28668	Modificada	Crítica (9.8)	0.83%	—	Jenkins Role-based Authorization Strategy	2/4/2023	17/6/2026	Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.
CVE-2021-21624	Modificada	Media (4.3)	0.88%	—	Jenkins Role-based Authorization Strategy	18/3/2021	17/6/2026	An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.
CVE-2020-2286	Modificada	Alta (8.8)	1.3%	—	Jenkins Role-based Authorization Strategy	8/10/2020	17/6/2026	Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.
CVE-2017-1000090	Modificada	Alta (8.8)	0.68%	—	Jenkins Role-based Authorization Strategy	5/10/2017	17/6/2026	Role-based Authorization Strategy Plugin was not requiring requests to its API be sent via POST, thereby opening itself to Cross-Site Request Forgery attacks. This allowed attackers to add administrator role to any user, or to remove the authorization configuration, preventing legitimate access to Jenkins.