StackRadarChart IndexLive demo

CVE-2024-23900

Medium

Advisory

Published 24 Jan 2024In the index since 8 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.6; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3; of 17,787 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 1 of 1; affected package

Path traversal vulnerability in Jenkins Matrix Project Plugin

Carried by container images the latest versions of 3 of 17,787 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
matrix-projectmaven	1.4.1, 789.v57a_725b_63c79	822.824.v14451b	2

OSV records: GHSA-cjgm-9vc9-56mx

Charts affected

3 by stars

Chart

Latest

Affected images

Radar Score

jenkinstestchart

1 of 2 See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2024-23900.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	matrix-project@789.v57a_725b_63c79	822.824.v14451b

Open the chart page →

9,108

jenkinstest-jenkins

1 of 2 See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2024-23900.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	matrix-project@789.v57a_725b_63c79	822.824.v14451b

Open the chart page →

9,108

jenkinsjenkins-x

1 of 2 See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2024-23900.

Container image	Digest	Package	Fixed in
jenkinsci/jenkins :2.67	a1f33f004659	matrix-project@1.4.1	822.824.v14451b

Open the chart page →

10,682

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	matrix-project@789.v57a_725b_63c79	822.824.v14451b	2
jenkinsci/jenkins :2.67	a1f33f004659	matrix-project@1.4.1	822.824.v14451b	1