Critical vulnerabilities have been reported in Jenkins, among which the following can be highlighted: CVE-2024-47803, CVE-2024-47804, CVE-2024-47805, CVE-2024-47806 and CVE-2024-47807, these last two vulnerabilities, with high criticality and CVSSv3 score of 8.1, for the others, the score has not yet been defined. These flaws could allow attackers to steal confidential data, bypass security restrictions, and even gain full control of Jenkins servers.

The Jenkins team recommends taking corrective actions as soon as possible by applying the provided security patches.