Unable to save the maven project after Jenkins Plugins Upgrade

[karthikbnayak]

Hi Team.

I have upgraded my Jenkins instance version from 2.452.1 to 2.479.3 and updated my all plugins also. After upgrade the plugins, Am facing issue with Maven project creation save and apply button is not working properly. Project is creating after if i configure any new things its not saving. Please find the attached screenshot while saving am getting error. Please find the below upgraded plugins.

Jenkins: 2.479.3
OS: Linux - 4.18.0-553.58.1.el8_10.x86_64
Java: 17.0.15 - Red Hat, Inc. (OpenJDK 64-Bit Server VM)

Office-365-Connector:5.1.0
ace-editor:1.1
active-directory:2.40
allure-jenkins-plugin:2.32.0
amazon-ecr:1.151.vb_ca_71ddd0b_cf
analysis-core:1.95
analysis-model-api:13.5.0
android-emulator:664.ve25e686a_c00b_
ansicolor:1.0.6
ant:513.vde9e7b_a_0da_0f
antisamy-markup-formatter:173.v680e3a_b_69ff3
apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83
apache-httpcomponents-client-5-api:5.5-150.veb_76e719855b_
aqua-security-scanner:3.2.8
artifactory:4.0.8
asm-api:9.8-135.vb_2239d08ee90
atlassian-bitbucket-server-integration:4.2.0
authentication-tokens:1.131.v7199556c3004
aws-credentials:248.v78a_dcfc9db_ff
aws-java-sdk:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-api-gateway:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-autoscaling:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudformation:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudfront:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-cloudwatch:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-codebuild:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-codedeploy:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ec2:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ecr:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ecs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-efs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-elasticbeanstalk:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-elasticloadbalancingv2:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-iam:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-kinesis:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-lambda:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-logs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-minimal:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-organizations:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-secretsmanager:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-sns:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-sqs:1.12.780-480.v4a_0819121a_9e
aws-java-sdk-ssm:1.12.780-480.v4a_0819121a_9e
aws-java-sdk2-core:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-ec2:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-ecr:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-netty-nio-client:2.31.63-54.vcf1e5a_c56c49
aws-java-sdk2-s3:2.31.63-54.vcf1e5a_c56c49
badge:2.8
basic-branch-build-strategies:228.v68c089762a_db_
bitbucket-build-status-notifier:1.4.2
bitbucket-pullrequest-builder:1.5.0
blame-upstream-commiters:1.2
blueocean:1.27.21
blueocean-autofavorite:1.2.5
blueocean-bitbucket-pipeline:1.27.21
blueocean-commons:1.27.21
blueocean-config:1.27.21
blueocean-core-js:1.27.21
blueocean-dashboard:1.27.21
blueocean-display-url:2.4.4
blueocean-events:1.27.21
blueocean-git-pipeline:1.27.21
blueocean-github-pipeline:1.27.21
blueocean-i18n:1.27.21
blueocean-jira:1.27.21
blueocean-jwt:1.27.21
blueocean-personalization:1.27.21
blueocean-pipeline-api-impl:1.27.21
blueocean-pipeline-editor:1.27.21
blueocean-pipeline-scm-api:1.27.21
blueocean-rest:1.27.21
blueocean-rest-impl:1.27.21
blueocean-web:1.27.21
bootstrap4-api:4.6.0-6
bootstrap5-api:5.3.3-2
bouncycastle-api:2.30.1.80-261.v00c0e2618ec3
branch-api:2.1229.ve86b_d02b_5e56
build-blocker-plugin:166.vc82fc20b_a_ed6
build-keeper-plugin:19.va_df8a_2c65123
build-monitor-plugin:1.14-973.ve458d62e7c4f
build-pipeline-plugin:2.0.2
build-timeout:1.38
build-token-trigger:1.0.0
build-user-vars-plugin:195.v8c35f9d5c3dc
build-with-parameters:76.v9382db_f78962
caffeine-api:3.2.0-166.v72a_6d74b_870f
categorized-view:193.v7d4c783474c0
checks-api:370.vb_61a_c57328f3
claim:599.v95c2f92e1c88
clone-workspace-scm:121.vf1f73b_d671ef
cloud-stats:377.vd8a_6c953e98e
cloudbees-bitbucket-branch-source:936.4.3
cloudbees-folder:6.1026.ve06dfa_cf31c3
command-launcher:123.v37cfdc92ef67
commons-collections4-api:4.5.0-8.va_d5448ef9011
commons-compress-api:1.26.1-2
commons-httpclient3-api:3.1-3
commons-lang3-api:3.18.0-98.v3a_674c06072d
commons-text-api:1.13.1-176.v74d88f22034b_
conditional-buildstep:1.5.0
config-file-provider:988.v0461fcc2b_9d1
copyartifact:770.va_6c69e063442
coverity:1.11.4
credentials:1415.v831096eb_5534
credentials-binding:696.v256688029804
cucumber-reports:5.9.0
cvs:483.v69a_98dfd973b_
dashboard-view:2.537.v5132851f6ca_f
data-tables-api:2.3.2-3
datadog:9.1.6
discard-old-build:1.08
disk-usage:1.3
display-url-api:2.209.v582ed814ff2f
docker-build-step:2.12
docker-commons:457.v0f62a_94f11a_3
docker-java-api:3.5.2-119.v54c784c71fa_3
docker-plugin:1274.vc0203fdf2e74
docker-workflow:621.va_73f881d9232
doxygen:178.v6ea_ef5f7dfdb
dropdown-viewstabbar-plugin:1.7
durable-task:587.v84b_877235b_45
ec2-fleet:3.2.0
echarts-api:5.6.0-5
eddsa-api:0.3.0.1-19.vc432d923e5ee
email-ext:1916.vc954a_f86ff21
emoji-symbols-api:16.0-26.v9818ff7423f0
envinject:2.926.v69c9b_3896a_96
envinject-api:1.235.va_14c74f8f487
extended-choice-parameter:388.ve7b_d0b_920e10
extensible-choice-parameter:237.v51568f37b_78e
external-monitor-job:223.vb_fddcf42c9b_3
favorite:2.237.v79163ca_8b_892
folder-properties:62.v1636b_4a_84608
font-awesome-api:6.7.2-1
forensics-api:3.1.0
git:5.7.0
git-client:6.2.0
git-parameter:444.vca_b_84d3703c2
git-server:137.ve0060b_432302
github:1.43.0
github-api:1.321-488.v9b_c0da_9533f8
github-branch-source:1824.v046257273408
github-organization-folder:1.6
gradle:2.15
groovy-label-assignment:1.2.0
groovy-postbuild:272.v52a_03efb_8653
gson-api:2.13.1-139.v4569c2ef303f
handlebars:3.0.8
handy-uri-templates-2-api:2.1.8-36.v85e4cb_234a_13
htmlpublisher:427
icon-shim:3.0.0
instance-identity:203.v15e81a_1b_7a_38
ionicons-api:88.va_4187cb_eddf1
ivy:582.v35fb_da_0312f7
jackson2-api:2.19.0-404.vb_b_0fd2fea_e10
jacoco:3.3.7
jakarta-activation-api:2.1.3-2
jakarta-mail-api:2.1.3-2
javadoc:327.vdfe586651ee0
javax-activation-api:1.2.0-8
javax-mail-api:1.6.2-11
jaxb:2.3.9-133.vb_ec76a_73f706
jdk-tool:83.v417146707a_3d
jenkins-design-language:1.27.21
jersey2-api:2.47-165.ve7809a_3e87e0
jira:3.17
jira-steps:2.0.180.vccfe35b_5910d
jjwt-api:0.11.5-120.v0268cf544b_89
jnr-posix-api:3.1.20-138.vdb_9db_a_39182f
job-dsl:1.93
job-import-plugin:122.v35289550f1e6
jobConfigHistory:1330.vcb_8320ea_cdb_e
joda-time-api:2.14.0-127.v7d9da_295a_d51
join:1.22-SNAPSHOT (private-682cfed6-mwaite)
jquery:1.12.4-3
jquery-detached:1.2.1
jquery3-api:3.7.1-3
jsch:0.2.16-95.v3eecb_55fa_b_78
json-api:20250517-153.vc8a_a_d87c0ce3
json-path-api:2.9.0-148.v22a_7ffe323ce
jsoup:1.21.1-52.v96e4041b_60fd
junit:1335.v6b_a_a_e18534e1
ldap:780.vcb_33c9a_e4332
leastload:62.vfa_8830902733
lockable-resources:1349.v8b_ccb_c5487f7
log-parser:2.4.2
mail-watcher-plugin:1.20
mailer:489.vd4b_25144138f
mapdb-api:1.0.9-44.va_1e1310c9118
mashup-portlets-plugin:1.0.9
matrix-auth:3.2.6
matrix-project:849.v0cd64ed7e531
maven-plugin:3.26
mercurial:1309.v6802b_f0efb_b_9
mina-sshd-api-common:2.15.0-161.vb_200831a_c15b_
mina-sshd-api-core:2.15.0-161.vb_200831a_c15b_
momentjs:1.1.1
monitoring:2.5.0
msbuild:1.37
multi-branch-project-plugin:0.7
multiple-scms:0.8
naginator:1.504.vfc3736332f16
netty-api:4.1.118.Final-9.v776038d601a_7
nodejs:1.6.5
nuget:1.1
nunit:571.v30a_1e3f86709
okhttp-api:4.11.0-189.v976fa_d3379d6
oss-symbols-api:356.v2da_d59a_3742b_
pam-auth:1.12
parameterized-trigger:859.vb_e3907a_07a_16
pipeline-aws:1.45
pipeline-build-step:571.v08a_fffd4b_0ce
pipeline-github-lib:65.v203688e7727e
pipeline-graph-analysis:241.vc3d48fb_b_2582
pipeline-groovy-lib:752.vdddedf804e72
pipeline-input-step:527.vd61b_1d3c5078
pipeline-milestone-step:138.v78ca_76831a_43
pipeline-model-api:2.2255.v56a_15e805f12
pipeline-model-declarative-agent:1.1.1
pipeline-model-definition:2.2255.v56a_15e805f12
pipeline-model-extensions:2.2255.v56a_15e805f12
pipeline-rest-api:2.38
pipeline-stage-step:322.vecffa_99f371c
pipeline-stage-tags-metadata:2.2255.v56a_15e805f12
pipeline-stage-view:2.38
pipeline-utility-steps:2.18.0
plain-credentials:199.v9f8e1f741799
plot:2.4.0
plugin-util-api:6.1.0
popper-api:1.16.1-3
popper2-api:2.11.6-5
port-allocator:351.v7a_94cf6e4677
postbuild-task:78.v24529f1f5cdb_
prism-api:1.30.0-1
promoted-builds:992.va_00888f21b_74
pubsub-light:1.19
python:1.3
quality-gates:2.5
radiatorviewplugin:1.29
rebuild:338.va_0a_b_50e29397
release:2.19
resource-disposer:0.25
robot:6.0.0
run-condition:243.v3c3f94e46a_8b_
s3:508.vc5478ef36921
scm-api:704.v3ce5c542825a_
scons:0.4
script-security:1373.vb_b_4a_a_c26fa_00
shared-workspace:1.0.2
snakeyaml-api:2.3-125.v4d77857a_b_402
sonar:2.18
sonar-quality-gates:352.vdcdb_d7994fb_6
spotinst:2.2.21
sse-gateway:1.28
ssh:158.ve2a_e90fb_7319
ssh-agent:386.v36cc0c7582f0
ssh-credentials:359.v2191c4cf635f
ssh-slaves:3.1031.v72c6b_883b_869
ssh-steps:2.0.79.v1d1b_5f76dda_8
sshd:3.372.v5d04a_e92d8cf
stashNotifier:1.516.v6d49910f22a_5
structs:350.v3b_30f09f2363
subversion:1287.vd2d507146906
tasks:4.52
terraform:1.0.10
test-results-analyzer:309.vda_3a_a_f100542
testlink:3.16
testng-plugin:940.vc244edffc2ec
tics:2024.1.2
timestamper:1.30
token-macro:444.v52de7e9c573d
translation:1.16
trilead-api:2.209.v0e69b_c43c245
uno-choice:2.8.6
validating-string-parameter:255.v31e2e6d0d273
variant:70.va_d9f17f859e0
violations:0.7.11
warnings:4.66
warnings-ng:12.7.0
whitesource:19.1.1
workflow-aggregator:608.v67378e9d3db_1
workflow-api:1373.v7b_813f10efa_b_
workflow-basic-steps:1079.vce64b_a_929c5a_
workflow-cps:4151.v5406e29e3c90
workflow-cps-global-lib:615.vb_b_0664a_b_19f3
workflow-durable-task-step:1434.v1b_595c29ddd7
workflow-job:1540.v295eccc9778f
workflow-multibranch:806.vb_b_688f609ee9
workflow-remote-loader:1.6
workflow-scm-step:437.v05a_f66b_e5ef8
workflow-step-api:704.ve4f0967e98fa_
workflow-support:968.v8f17397e87b_8
ws-cleanup:0.48
xray-connector:2.6.1

Job Import Plugin also not working am unable to select the Jenkins instance.Please find the screenshot.

[mawinter69 (Markus Winter)]

you have a bunch of plugins that are very old. Some are definitely not needed anymore and some have security issues

ace-editor
handlebars
momentjs
jquery-detached
quality-gates (you also have sonar-quality-gates that does the same and is way newer)
coverity (which is deprecated and the successor is synopsis-coverity which is also deprecated its successor is blackduck-security-scan)
scons (14 years old)
whitesource (distribution was suspended)
warnings (distribution was suspended, you have the successor warnings-ng)
tasks (distribution was suspended)
testlink
violations (use warnings-ng instead)
popper-api
blame-upstream-commiters

There are probably more that are questionable

You should look over all plugins and check if you still use them. If not uninstall it.

e.g. you have active-directory, ldap and pam-auth installed you only need one of them

do you really need cvs and subversion plugins? Or ivy?

[karthikbnayak]

Thanks @mawinter69 for your response. Is it because of that maven configuration is not saving? and some plugins we are using because those tools we are using in our builds.

[karthikbnayak]

@mawinter69 Thanks for your help. After disabling the few plugins am able to save the maven project properly I have another question As a admin able to see the all test result and graph but as a normal user they are unable to see the test result. Please find the attached screenshot.

[mawinter69 (Markus Winter)]

Sorry but don’t know. Maybe you’re using the old warnings plugin instead of warnings-ng or some other outdated plugin for this.

[karthikbnayak]

Hi Team,

Any suggestion please for above issue.
Regards,
Karthik Nayak

[karthikbnayak]

Hi @mawinter69
Last time the same is happened on my Jenkins when did upgrade from 2.387.1 to 2.452.4 same my view permission is causing this issue after that i downgraded to 2.452.1 so issue has been resolved. So in Jenkins document they mention like below and find the link also.Jenkins Security Advisory 2024-08-07

Missing permission check allows accessing other users’ “My Views”

SECURITY-3349 / CVE-2024-43045
Severity (CVSS): Medium
Description:

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint.

This allows attackers with Overall/Read permission to access other users’ “My Views”. Attackers with global View/Configure and View/Delete permissions are also able to change other users’ “My Views”.

Jenkins 2.471, LTS 2.452.4, LTS 2.462.1 restricts access to a user’s “My Views” to the owning user and administrators.

So my question like then which LTS version i need to use apart from 2.462.x? If any answer please post me here.

Thanks and Regards,
Karthik Nayak