Junglewise Threat Intelligence

CVE-2023-28668: Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled

CVE-2023-28668 · Severity: low · CVSS 3.1 · Published 2023-04-02

Technologies: org.jenkins-ci.plugins:role-strategy (Maven). Vendors: Maven.

Executive brief

Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled

Affected products

  • Maven org.jenkins-ci.plugins:role-strategy

Related threats