Old Plugin Version (1.4.10) on Jenkins 2.332.3 LTS

XMLWordPrintable

    • Type: Task
    • Resolution: Fixed
    • Priority: Minor
    • Component/s: rocket-chat-notifier-plugin
    • None
    • Environment:
      Docker
      Jenkins 2.332.3 (LTS)

      Hi,

      we are getting CVE Errors on our Jenkins 2.332.3 (LTS) which i think they are already fixed in Version 1.5.1.

      But unfortunately on Jenkins LTS the latest Version of the Plugin is 1.4.10.

      The CVE Errors we are getting are:

      SECURITY-2241 / CVE-2022-28138 (CSRF), CVE-2022-28139 (missing permission check)

      What's the reason that the Plugin on the LTS Version of Jenkins will not be updated?

            Assignee:
            Martin Reinhardt
            Reporter:
            Nicolo Mendola
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: