CVE-2025-24401

Name of the Vulnerable Software and Affected Versions Jenkins Folder-based Authorization Strategy Plugin versions 217.vd5b 18537403e and earlier

Description The issue potentially allows users who were formerly granted certain permissions to access functionality they are no longer entitled to, because the plugin does not verify that the configured permissions are enabled. This typically involves optional permissions.

Recommendations For Jenkins Folder-based Authorization Strategy Plugin versions 217.vd5b 18537403e and earlier, as a temporary workaround, consider reviewing and manually validating the permissions configured for each user to ensure they align with the intended access levels, until a patch is available.