io.jenkins.plugins:folder-auth
Maven2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting io.jenkins.plugins:folder-authpage 1 of 1
- CVE-2022-27200MEDIUMCVSS 4.8EG 4.8✓ Fixed in 1.42022-03-15
vulnerable: 0.1-alpha-1 ... 1.3 (9 versions)
Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Adm…
- CVE-2025-24401MEDIUMCVSS 6.8EG 6.82025-01-22
vulnerable: 0.1-alpha-1 ... 1.4 (10 versions)
Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Over…
Check whether io.jenkins.plugins:folder-auth is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for io.jenkins.plugins:folder-auth CVEs against the assets you own.
Start Free Scan →