Jenkins Project Jenkins docker-build-step Plugin

• CVE-2024-2216 High 8.8 A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket 0.8%
• CVE-2024-2215 Medium 6.1 A cross-site request forgery (CSRF) vulnerability in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers to connect to an attacker-specified TCP or Unix socket URL, and to reconfigure t 0.4%