CVE-2024-47803
Fixed in a distro release EPSS <1%CVSS 4.3
Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.
Products: Jenkins project Jenkins
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.jenkins-ci.main:jenkins-core | 2.462.3 |
| Maven | org.jenkins-ci.main:jenkins-core | 2.479 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | jenkins-2.462 | 2.462.3-r0 |
| Red Hat ocp tools 4.12 | jenkins | 0:2.462.3.1730119132-3.el8 |
| Red Hat ocp tools 4.12 | jenkins-2-plugins | 0:4.12.1730119231-1.el8 |
| Red Hat ocp tools 4.13 | jenkins | 0:2.462.3.1729839924-3.el8 |
| Red Hat ocp tools 4.13 | jenkins-2-plugins | 0:4.13.1729840148-1.el8 |
| Red Hat ocp tools 4.14 | jenkins | 0:2.462.3.1729839727-3.el8 |
| Red Hat ocp tools 4.14 | jenkins-2-plugins | 0:4.14.1729839844-1.el8 |
| Red Hat ocp tools 4.15 | jenkins | 0:2.462.3.1729837947-3.el8 |
| Red Hat ocp tools 4.15 | jenkins-2-plugins | 0:4.15.1729838165-1.el8 |