Critical vulnerabilities have been reported in Jenkins, including CVE-2024-47803, CVE-2024-47804, CVE-2024-47805, CVE-2024-47806, and CVE-2024-47807. The last two vulnerabilities are classified as high severity, with a CVSSv3 score of 8.1, while the scores for the others are yet to be determined. These flaws could allow attackers to steal confidential data, bypass security restrictions, and even gain full control of Jenkins servers.

The Jenkins team recommends taking corrective actions as soon as possible by applying the provided security patches.