Jenkins Security Advisory 2025-04-02

CSIRTS triage

What

The advisory affects Jenkins Core and several plugins.

Who is affected

Users of Jenkins Core and the specified plugins.

Urgency

Remediation is necessary but the severity is unknown.

Action

Review and apply any available updates for Jenkins Core and the affected plugins.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

Jenkins Security Advisories (INTL · vendor-psirt · site)

Severity

unknown

Published

2025-04-02

Exploitation

Not in CISA KEV at last sync

Original advisory: https://www.jenkins.io/security/advisory/2025-04-02/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2025-317200.39% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all scored CVEs.
• Low exploitation riskCVE-2025-317210.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all scored CVEs.
• Moderate exploitation riskCVE-2025-317221.2% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 64% of all scored CVEs.
• Low exploitation riskCVE-2025-317230.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 16% of all scored CVEs.
• Low exploitation riskCVE-2025-317240.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
• Low exploitation riskCVE-2025-317250.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
• Low exploitation riskCVE-2025-317260.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
• Low exploitation riskCVE-2025-317270.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
• Low exploitation riskCVE-2025-317280.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.

Referenced CVEs

More from Jenkins Security Advisories

• unknownJenkins Security Advisory 2026-06-242026-06-24
• unknownJenkins Security Advisory 2026-06-102026-06-10
• unknownJenkins Security Advisory 2026-05-272026-05-27
• unknownJenkins Security Advisory 2026-04-292026-04-29
• unknownJenkins Security Advisory 2026-03-182026-03-18