Security flaws in 100 Jenkins plugins put enterprise networks at risk

zdnet.com

19 pointsjmsflknr3 comments

I wonder how many Jenkins exploits will lead people to put their Jenkins hosts behind a perimiter? When is enough enough?

Jenkins should be behind a perimeter regardless of active exploits, leaving it open to the public internet is just asking for trouble.

Yeah, but some people still seem to think leaving it out there is a good idea. It baffles me frankly.