Description
Jenkins Role-based Authorization Strategy Plugin 3.0 and earlier does not properly invalidate a permission cache when the configuration is changed, resulting in permissions being granted based on an outdated configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins Role-based Authorization Strategy Plugin | 2.12 – < unspecified, unspecified – ≤ 3.0 | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:role-strategy | >= 2.12, < 3.1 | 3.1 | GHSA-25g4-p347-x748 |