By Ravie Lakshmanan
A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code execution on targeted systems.
The flaws, tracked asΒ CVE-2023-27898Β andΒ CVE-2023-27905, impact the Jenkins server and Update Center, and have been collectively christenedΒ CorePlagueΒ by cloud security firm Aqua. All versions of Jenkins versions prior to 2.319.2 are