Threats tagged 'bit-jenkins-2026-70430'

A vulnerability in Jenkins versions 2.575 and earlier, including LTS 2.568.1 and earlier, allows attackers with Overall/Manage permission to instantiate arbitrary object types in the project naming strategy configuration. This can lead to unauthorized configuration changes intended only for administrators. The vulnerability has a low severity score and does not impact confidentiality or availability.