Jenkins Project Jenkins Folder-based Authorization Strategy Plugin

• CVE-2025-24401 Medium 6.8 Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (ty 0.3%
• CVE-2022-27200 Unrated Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resulting in a stored cross-site scripting (XSS) vulnerability ex 0.6%