Jenkins Project Jenkins Convert To Pipeline Plugin

• CVE-2023-28677 Critical 9.8 Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Build Steps, and Post-build Actions to the equivalent Pipeline step 0.8%
• CVE-2023-28676 High 8.8 A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers to create a Pipeline based on a Freestyle project, potentially leading to remot 0.6%