Jenkins Matrix Authorization Strategy Plugin

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-42521

  Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors

  Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when deserializing inheritance strategies, without restricting the classes that can be instantiated…

  Jenkins Project Jenkins Matrix Authorization Strategy Plugin jenkins-2-openjdk-21 jenkins-2-openjdk-25 Web / CMS Wolfi Maven
  Apr 29, 2026
• Medium 6.5
  CVE-2021-21623

  Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items

  An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

  Jenkins Project Jenkins Matrix Authorization Strategy Plugin org.jenkins-ci.plugins:matrix-auth Web / CMS Maven
  Mar 18, 2021