Jenkins Folder-Based Authorization Strategy vulnerabilities

2 CVEs affecting Jenkins Folder-Based Authorization Strategy, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24401, published 2025-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27200, published 2022-03-15. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting (XSS) vulnerability…
CVE-2025-24401, published 2025-01-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted…