[JENKINS-68527] Old Plugin Version (1.4.10) on Jenkins 2.332.3 LTS

Hi,

we are getting CVE Errors on our Jenkins 2.332.3 (LTS) which i think they are already fixed in Version 1.5.1.

But unfortunately on Jenkins LTS the latest Version of the Plugin is 1.4.10.

The CVE Errors we are getting are:

SECURITY-2241 / CVE-2022-28138 (CSRF), CVE-2022-28139 (missing permission check)

What's the reason that the Plugin on the LTS Version of Jenkins will not be updated?

Nicolo Mendola created issue - 2022-05-13 06:03

Martin Reinhardt made changes - 2022-06-07 04:08

Status

Original: Open [ 1 ]

New: In Progress [ 3 ]

Martin Reinhardt made changes - 2022-06-07 04:12

Resolution		New: Fixed [ 1 ]
Status	Original: In Progress [ 3 ]	New: Resolved [ 5 ]

Jenkins