org.jenkins-ci.main:jenkins-core (Maven)
Advisories
519
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.568 or later clears every advisory below that has a fix.
Upgrade commands
maven
<dependency><groupId>org.jenkins-ci.main</groupId><artifactId>jenkins-core</artifactId><version>2.568</version></dependency>gradle
implementation("org.jenkins-ci.main:jenkins-core:2.568")Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-m6wv-wh8g-64xc Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations |
Medium EPSS 0.18% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-m6wv-wh8g-64xc Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations |
Medium EPSS 0.18% |
< 2.555.3 | 2.555.3 |
| GHSA-93qh-vwrm-c5pw Jenkins: Stored XSS vulnerability in node offline cause description |
Medium EPSS 0.26% |
>= 2.483, < 2.568 | 2.568 |
| GHSA-92m7-4fpw-2wxm Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" |
Medium EPSS 0.23% |
< 2.555.3 | 2.555.3 |
| GHSA-92m7-4fpw-2wxm Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" |
Medium EPSS 0.23% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-g28p-6mcc-v4rv Jenkins exposes other users' timezone and view names to users with Overall/Read permission |
Medium EPSS 0.22% |
< 2.555.3 | 2.555.3 |
| GHSA-g28p-6mcc-v4rv Jenkins exposes other users' timezone and view names to users with Overall/Read permission |
Medium EPSS 0.22% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-mw82-xcg6-gx79 Jenkins: Missing permission check allows unauthorized cancellation of queue items |
Medium EPSS 0.21% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-mw82-xcg6-gx79 Jenkins: Missing permission check allows unauthorized cancellation of queue items |
Medium EPSS 0.21% |
< 2.555.3 | 2.555.3 |
| GHSA-463r-5m89-4xfr Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL |
Medium EPSS 0.47% |
< 2.555.3 | 2.555.3 |
| GHSA-463r-5m89-4xfr Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL |
Medium EPSS 0.47% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-3rqh-hch3-jhpc Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL |
Medium EPSS 0.28% |
< 2.555.3 | 2.555.3 |
| GHSA-3rqh-hch3-jhpc Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL |
Medium EPSS 0.28% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-g2xq-2v27-4rh3 Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation |
High EPSS 53.13% |
>= 2.556, < 2.568 | 2.568 |
| GHSA-g2xq-2v27-4rh3 Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation |
High EPSS 53.13% |
< 2.555.3 | 2.555.3 |
| GHSA-phhv-63fh-rrc8 Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation |
High EPSS 0.28% |
>= 2.442, < 2.555 | 2.555 |
| GHSA-r6qv-frpc-q66c Jenkins has a link following vulnerability allows arbitrary file creation |
High EPSS 2.07% |
< 2.555 | 2.555 |
| GHSA-wfhp-qgm8-5p5c Jenkins has a build information disclosure vulnerability through Run Parameter |
Medium EPSS 0.37% |
< 2.541.2 | 2.541.2 |
| GHSA-wfhp-qgm8-5p5c Jenkins has a build information disclosure vulnerability through Run Parameter |
Medium EPSS 0.37% |
>= 2.542, < 2.551 | 2.551 |
| GHSA-85h6-5m3v-gx37 Jenkins has a stored XSS vulnerability in node offline cause description |
High EPSS 0.48% |
>= 2.483, < 2.541.2 | 2.541.2 |
| GHSA-85h6-5m3v-gx37 Jenkins has a stored XSS vulnerability in node offline cause description |
High EPSS 0.48% |
>= 2.542, < 2.551 | 2.551 |
| GHSA-6837-qgrc-x5p6 Jenkins has a CSRF vulnerability on the login form |
Low EPSS 0.19% |
< 2.528.3 | 2.528.3 |
| GHSA-6837-qgrc-x5p6 Jenkins has a CSRF vulnerability on the login form |
Low EPSS 0.19% |
>= 2.529, < 2.541 | 2.541 |
| GHSA-hxjg-2jvf-h3rx Jenkins's build authorization token is stored and displayed in plain text |
Medium EPSS 0.16% |
< 2.528.3 | 2.528.3 |
| GHSA-hxjg-2jvf-h3rx Jenkins's build authorization token is stored and displayed in plain text |
Medium EPSS 0.16% |
>= 2.529, < 2.541 | 2.541 |
| GHSA-fxj7-6v9w-xc76 Jenkins's build authorization token is stored and displayed in plain text |
Medium EPSS 0.18% |
>= 2.529, < 2.541 | 2.541 |
| GHSA-fxj7-6v9w-xc76 Jenkins's build authorization token is stored and displayed in plain text |
Medium EPSS 0.18% |
< 2.528.3 | 2.528.3 |
| GHSA-p3f5-98cv-562j Jenkins is missing a permission check on password fields |
Medium EPSS 0.25% |
>= 2.529, < 2.541 | 2.541 |
| GHSA-p3f5-98cv-562j Jenkins is missing a permission check on password fields |
Medium EPSS 0.25% |
< 2.528.3 | 2.528.3 |
| GHSA-9p56-p6mw-w8qc Jenkins has a Denial of service vulnerability in HTTP-based CLI |
High EPSS 0.56% |
>= 2.529, < 2.541 | 2.541 |
| GHSA-9p56-p6mw-w8qc Jenkins has a Denial of service vulnerability in HTTP-based CLI |
High EPSS 0.56% |
< 2.528.3 | 2.528.3 |
| GHSA-qrh5-jg98-cr48 Jenkins has a log message injection vulnerability |
Medium EPSS 0.38% |
< 2.516.3 | 2.516.3 |
| GHSA-qrh5-jg98-cr48 Jenkins has a log message injection vulnerability |
Medium EPSS 0.38% |
>= 2.517, < 2.528 | 2.528 |
| GHSA-223m-4rfp-646h Jenkins is missing a permission check in the authenticated users' profile menu |
Medium EPSS 0.52% |
< 2.516.3 | 2.516.3 |
| GHSA-223m-4rfp-646h Jenkins is missing a permission check in the authenticated users' profile menu |
Medium EPSS 0.52% |
>= 2.517, < 2.528 | 2.528 |
| GHSA-67v4-38h7-9jjp Jenkins has a missing permission check, allowing users to obtain agent names |
Medium EPSS 5.00% |
< 2.516.3 | 2.516.3 |
| GHSA-67v4-38h7-9jjp Jenkins has a missing permission check, allowing users to obtain agent names |
Medium EPSS 5.00% |
>= 2.517, < 2.528 | 2.528 |
| GHSA-wr6w-jxg7-qpfh Jenkins Missing Permission Check |
Medium EPSS 0.39% |
>= 2.500, < 2.504 | 2.504 |
| GHSA-wr6w-jxg7-qpfh Jenkins Missing Permission Check |
Medium EPSS 0.39% |
< 2.492.3 | 2.492.3 |
| GHSA-565r-pf5q-45v6 Jenkins Missing Permission Check |
Medium EPSS 0.41% |
>= 2.500, < 2.504 | 2.504 |
| GHSA-565r-pf5q-45v6 Jenkins Missing Permission Check |
Medium EPSS 0.41% |
< 2.492.3 | 2.492.3 |
| GHSA-8hmv-92wm-39ch Jenkins Open Redirect vulnerability |
Medium EPSS 0.62% |
>= 2.493, < 2.500 | 2.500 |
| GHSA-8hmv-92wm-39ch Jenkins Open Redirect vulnerability |
Medium EPSS 0.62% |
< 2.492.2 | 2.492.2 |
| GHSA-7g95-jmg9-h524 Jenkins cross-site request forgery (CSRF) vulnerability |
Medium EPSS 0.44% |
>= 2.493, < 2.500 | 2.500 |
| GHSA-7g95-jmg9-h524 Jenkins cross-site request forgery (CSRF) vulnerability |
Medium EPSS 0.44% |
< 2.492.2 | 2.492.2 |
| GHSA-rfh6-9r2q-98vf Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission |
Medium EPSS 0.34% |
>= 2.493, < 2.500 | 2.500 |
| GHSA-rfh6-9r2q-98vf Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission |
Medium EPSS 0.34% |
< 2.492.2 | 2.492.2 |
| GHSA-p34j-r3ch-c985 Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission |
Medium EPSS 0.78% |
>= 2.493, < 2.500 | 2.500 |
| GHSA-p34j-r3ch-c985 Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission |
Medium EPSS 0.78% |
< 2.492.2 | 2.492.2 |
| GHSA-f9qj-77q2-h5c5 Jenkins item creation restriction bypass vulnerability |
Medium EPSS 0.67% |
< 2.462.3 | 2.462.3 |
| GHSA-f9qj-77q2-h5c5 Jenkins item creation restriction bypass vulnerability |
Medium EPSS 0.67% |
>= 2.466, < 2.479 | 2.479 |
| GHSA-pj95-ph4q-4qm4 Jenkins exposes multi-line secrets through error messages |
Medium EPSS 0.82% |
>= 2.466, < 2.479 | 2.479 |
| GHSA-pj95-ph4q-4qm4 Jenkins exposes multi-line secrets through error messages |
Medium EPSS 0.82% |
< 2.462.3 | 2.462.3 |
| GHSA-8pv9-qh96-9hc6 Jenkins does not perform a permission check in an HTTP endpoint |
Medium EPSS 2.87% |
>= 2.470, < 2.471 | 2.471 |
| GHSA-8pv9-qh96-9hc6 Jenkins does not perform a permission check in an HTTP endpoint |
Medium EPSS 2.87% |
>= 2.460, < 2.462.1 | 2.462.1 |
| GHSA-8pv9-qh96-9hc6 Jenkins does not perform a permission check in an HTTP endpoint |
Medium EPSS 2.87% |
< 2.452.4 | 2.452.4 |
| GHSA-h856-ffvv-xvr4 Jenkins Remoting library arbitrary file read vulnerability |
High EPSS 28.78% |
< 2.452.4 | 2.452.4 |
| GHSA-h856-ffvv-xvr4 Jenkins Remoting library arbitrary file read vulnerability |
High EPSS 28.78% |
>= 2.460, < 2.462.1 | 2.462.1 |
| GHSA-h856-ffvv-xvr4 Jenkins Remoting library arbitrary file read vulnerability |
High EPSS 28.78% |
>= 2.470, < 2.471 | 2.471 |
| GHSA-53ph-2r2x-vqw8 Cross-site WebSocket hijacking vulnerability in the Jenkins CLI |
High EPSS 67.15% |
>= 2.217, < 2.426.3 | 2.426.3 |
| GHSA-53ph-2r2x-vqw8 Cross-site WebSocket hijacking vulnerability in the Jenkins CLI |
High EPSS 67.15% |
No fix yet | |
| GHSA-53ph-2r2x-vqw8 Cross-site WebSocket hijacking vulnerability in the Jenkins CLI |
High EPSS 67.15% |
>= 2.427, < 2.442 | 2.442 |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
>= 2.441, < 2.442 | 2.442 |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
>= 2.427, < 2.440.1 | 2.440.1 |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
>= 1.606, < 2.426.3 | 2.426.3 |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
>= 2.427, < 2.440.1 | 2.440.1 |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
No fix yet | |
| GHSA-6f9g-cxwr-q5jr Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE Known exploited |
Critical EPSS 100.00% |
>= 1.606, <= 2.426.2 | No fix yet |
| GHSA-hq87-h4jg-vxfw Jenkins temporary uploaded file created with insecure permissions |
High EPSS 0.97% |
>= 2.50, < 2.414.2 | 2.414.2 |
| GHSA-hq87-h4jg-vxfw Jenkins temporary uploaded file created with insecure permissions |
High EPSS 0.97% |
>= 2.415, < 2.424 | 2.424 |
| GHSA-qv64-w99c-qcr9 Jenkins temporary uploaded file created with insecure permissions |
High EPSS 0.97% |
>= 2.415, < 2.424 | 2.424 |
| GHSA-qv64-w99c-qcr9 Jenkins temporary uploaded file created with insecure permissions |
High EPSS 0.97% |
>= 2.50, < 2.414.2 | 2.414.2 |
| GHSA-55wp-3pq4-w8p9 Jenkins temporary plugin file created with insecure permissions |
High EPSS 1.04% |
>= 2.415, < 2.424 | 2.424 |
| GHSA-55wp-3pq4-w8p9 Jenkins temporary plugin file created with insecure permissions |
High EPSS 1.04% |
>= 2.50, < 2.414.2 | 2.414.2 |
| GHSA-5j46-5hwq-gwh7 Jenkins Cross-site Scripting vulnerability |
Medium EPSS 1.02% |
>= 2.50, < 2.414.2 | 2.414.2 |
| GHSA-5j46-5hwq-gwh7 Jenkins Cross-site Scripting vulnerability |
Medium EPSS 1.02% |
>= 2.415, < 2.424 | 2.424 |
| GHSA-279f-qwgh-h5mp Jenkins does not exclude sensitive build variables from search |
Medium EPSS 3.94% |
>= 2.415, < 2.424 | 2.424 |
| GHSA-279f-qwgh-h5mp Jenkins does not exclude sensitive build variables from search |
Medium EPSS 3.94% |
>= 2.50, < 2.414.2 | 2.414.2 |
| GHSA-69vw-3pcm-84rw Jenkins Stored Cross-site Scripting vulnerability |
Medium EPSS 1.00% |
< 2.401.3 | 2.401.3 |
| GHSA-69vw-3pcm-84rw Jenkins Stored Cross-site Scripting vulnerability |
Medium EPSS 1.00% |
>= 2.415, < 2.416 | 2.416 |
| GHSA-69vw-3pcm-84rw Jenkins Stored Cross-site Scripting vulnerability |
Medium EPSS 1.00% |
>= 2.402, < 2.414.1 | 2.414.1 |
| GHSA-98fp-r22g-wpj7 Jenkins CSRF protection bypass vulnerability |
High EPSS 0.86% |
< 2.400 | 2.400 |
| GHSA-rrgp-c2w8-6vg6 Information disclosure through error stack traces related to agents |
Medium EPSS 0.72% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-rrgp-c2w8-6vg6 Information disclosure through error stack traces related to agents |
Medium EPSS 0.72% |
< 2.375.4 | 2.375.4 |
| GHSA-rrgp-c2w8-6vg6 Information disclosure through error stack traces related to agents |
Medium EPSS 0.72% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-584m-7r4m-8j6v Incorrect Authorization in Jenkins Core |
Medium EPSS 0.24% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-584m-7r4m-8j6v Incorrect Authorization in Jenkins Core |
Medium EPSS 0.24% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-584m-7r4m-8j6v Incorrect Authorization in Jenkins Core |
Medium EPSS 0.24% |
< 2.375.4 | 2.375.4 |
| GHSA-cj6r-8pxj-5jv6 Incorrect Permission Preservation in Jenkins Core |
Medium EPSS 0.74% |
< 2.375.4 | 2.375.4 |
| GHSA-cj6r-8pxj-5jv6 Incorrect Permission Preservation in Jenkins Core |
Medium EPSS 0.74% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-cj6r-8pxj-5jv6 Incorrect Permission Preservation in Jenkins Core |
Medium EPSS 0.74% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-h76p-mc68-jv3p Denial of service in Jenkins Core |
High EPSS 0.98% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-h76p-mc68-jv3p Denial of service in Jenkins Core |
High EPSS 0.98% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-h76p-mc68-jv3p Denial of service in Jenkins Core |
High EPSS 0.98% |
< 2.375.4 | 2.375.4 |
| GHSA-frgr-c5f2-8qhh Denial of service in Jenkins Core |
High EPSS 0.98% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-frgr-c5f2-8qhh Denial of service in Jenkins Core |
High EPSS 0.98% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-frgr-c5f2-8qhh Denial of service in Jenkins Core |
High EPSS 0.98% |
< 2.375.4 | 2.375.4 |
| GHSA-hf9h-vv4m-2f33 Incorrect Authorization in Jenkins Core |
High EPSS 0.23% |
>= 2.388, < 2.394 | 2.394 |
| GHSA-hf9h-vv4m-2f33 Incorrect Authorization in Jenkins Core |
High EPSS 0.23% |
< 2.375.4 | 2.375.4 |
| GHSA-hf9h-vv4m-2f33 Incorrect Authorization in Jenkins Core |
High EPSS 0.23% |
>= 2.376, < 2.387.1 | 2.387.1 |
| GHSA-j664-qhh4-hpf8 Cross-site Scripting vulnerability in Jenkins |
Critical EPSS 1.84% |
>= 2.376, < 2.394 | 2.394 |
| GHSA-j664-qhh4-hpf8 Cross-site Scripting vulnerability in Jenkins |
Critical EPSS 1.84% |
< 2.375.4 | 2.375.4 |
| GHSA-xpvp-h73c-m9rq Jenkins vulnerable to stored cross site scripting in the I:helpIcon component |
Medium EPSS 1.07% |
>= 2.367, < 2.370 | 2.370 |
| GHSA-mhp7-3393-pfqr Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.47% |
>= 2.332, < 2.332.4 | 2.332.4 |
| GHSA-9grj-j43m-mjqr Observable timing discrepancy allows determining username validity in Jenkins |
Medium EPSS 1.63% |
< 2.332.4 | 2.332.4 |
| GHSA-mhp7-3393-pfqr Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.47% |
>= 2.340, < 2.356 | 2.356 |
| GHSA-p3rc-946h-8cf5 Unauthorized view fragment access in Jenkins |
High EPSS 1.40% |
>= 2.335, < 2.356 | 2.356 |
| GHSA-7f84-p6r5-jr6q Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
>= 2.350, < 2.356 | 2.356 |
| GHSA-7f84-p6r5-jr6q Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
>= 2.346, < 2.346.1 | 2.346.1 |
| GHSA-7f84-p6r5-jr6q Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
< 2.332.4 | 2.332.4 |
| GHSA-6g4r-q7qg-6qx6 Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.47% |
>= 2.340, < 2.356 | 2.356 |
| GHSA-9grj-j43m-mjqr Observable timing discrepancy allows determining username validity in Jenkins |
Medium EPSS 1.63% |
>= 2.334, < 2.356 | 2.356 |
| GHSA-62wf-24c4-8r76 Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
>= 2.350, < 2.356 | 2.356 |
| GHSA-62wf-24c4-8r76 Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
>= 2.320, < 2.332.4 | 2.332.4 |
| GHSA-62wf-24c4-8r76 Cross-site Scripting vulnerability in Jenkins |
High EPSS 1.56% |
>= 2.346, < 2.346.1 | 2.346.1 |
| GHSA-hw55-f8wc-82m6 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 0.99% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-hw55-f8wc-82m6 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 0.99% |
< 2.176.4 | 2.176.4 |
| GHSA-47wc-p5cp-w7pw Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 65.29% |
< 2.176.4 | 2.176.4 |
| GHSA-9qgf-4fpf-cmh2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
< 2.176.4 | 2.176.4 |
| GHSA-7cjc-xppr-xj6x Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
< 2.176.4 | 2.176.4 |
| GHSA-7cjc-xppr-xj6x Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-47wc-p5cp-w7pw Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 65.29% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-hg6g-jj7g-x6v2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
< 2.176.4 | 2.176.4 |
| GHSA-hg6g-jj7g-x6v2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-q6q9-83xw-mp6p Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-q6q9-83xw-mp6p Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
< 2.176.4 | 2.176.4 |
| GHSA-9qgf-4fpf-cmh2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.03% |
>= 2.177, < 2.197 | 2.197 |
| GHSA-4g38-hrm4-rg94 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.98% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-4g38-hrm4-rg94 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.98% |
< 2.303.3 | 2.303.3 |
| GHSA-97c3-w9cr-6qc2 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.53% |
< 2.303.3 | 2.303.3 |
| GHSA-929w-q433-4h9x Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.55% |
< 2.303.3 | 2.303.3 |
| GHSA-8xg4-xq2v-v6j7 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.10% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-8xg4-xq2v-v6j7 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.10% |
< 2.303.3 | 2.303.3 |
| GHSA-3q84-vrvx-rfvf Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.43% |
< 2.303.3 | 2.303.3 |
| GHSA-3q84-vrvx-rfvf Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.43% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-2c79-h2h5-g3fw Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.10% |
< 2.303.3 | 2.303.3 |
| GHSA-2c79-h2h5-g3fw Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.10% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-58xm-mxjf-254g Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.56% |
< 2.303.3 | 2.303.3 |
| GHSA-58xm-mxjf-254g Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.56% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-pgj6-jmj5-wqfx Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.55% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-pgj6-jmj5-wqfx Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.55% |
< 2.303.3 | 2.303.3 |
| GHSA-m9hr-259f-2v23 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.41% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-m9hr-259f-2v23 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.41% |
< 2.303.3 | 2.303.3 |
| GHSA-j3cq-h6vh-gx7f Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.50% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-j3cq-h6vh-gx7f Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.50% |
< 2.303.3 | 2.303.3 |
| GHSA-97c3-w9cr-6qc2 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.53% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-929w-q433-4h9x Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 1.55% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-c5r9-rx53-q3gf Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin |
High EPSS 2.40% |
< 2.303.3 | 2.303.3 |
| GHSA-cvvm-4cr9-r436 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.15% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-cvvm-4cr9-r436 Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins |
Critical EPSS 2.15% |
< 2.303.3 | 2.303.3 |
| GHSA-cv2w-q8c3-xjv7 Agent-to-controller access control allows reading/writing most content of build directories in Jenkins |
Critical EPSS 1.60% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-cv2w-q8c3-xjv7 Agent-to-controller access control allows reading/writing most content of build directories in Jenkins |
Critical EPSS 1.60% |
< 2.303.3 | 2.303.3 |
| GHSA-c5r9-rx53-q3gf Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin |
High EPSS 2.40% |
>= 2.304, < 2.319 | 2.319 |
| GHSA-6q4g-84f3-mw74 Improper handling of equivalent directory names on Windows in Jenkins |
Medium EPSS 1.00% |
>= 2.304, < 2.315 | 2.315 |
| GHSA-4pw5-r58h-fv24 Path traversal vulnerability on Windows in Jenkins |
Medium EPSS 2.17% |
>= 2.304, < 2.315 | 2.315 |
| GHSA-6q4g-84f3-mw74 Improper handling of equivalent directory names on Windows in Jenkins |
Medium EPSS 1.00% |
< 2.303.2 | 2.303.2 |
| GHSA-4pw5-r58h-fv24 Path traversal vulnerability on Windows in Jenkins |
Medium EPSS 2.17% |
< 2.303.2 | 2.303.2 |
| GHSA-4wr9-2xc6-jmg5 Session fixation vulnerability in Jenkins |
High EPSS 1.75% |
>= 2.292, < 2.300 | 2.300 |
| GHSA-q4wp-8c99-69pw Improper permission checks allow canceling queue items and aborting builds in Jenkins |
Medium EPSS 2.04% |
< 2.289.2 | 2.289.2 |
| GHSA-4wr9-2xc6-jmg5 Session fixation vulnerability in Jenkins |
High EPSS 1.75% |
< 2.289.2 | 2.289.2 |
| GHSA-q4wp-8c99-69pw Improper permission checks allow canceling queue items and aborting builds in Jenkins |
Medium EPSS 2.04% |
>= 2.292, < 2.300 | 2.300 |
| GHSA-w2hv-rcqr-2h7r View name validation bypass in Jenkins |
Medium EPSS 1.91% |
< 2.277.2 | 2.277.2 |
| GHSA-w2hv-rcqr-2h7r View name validation bypass in Jenkins |
Medium EPSS 1.91% |
>= 2.278, < 2.287 | 2.287 |
| GHSA-pvwx-3jx5-24r2 Lack of type validation in agent related REST API in Jenkins |
Medium EPSS 2.73% |
< 2.277.2 | 2.277.2 |
| GHSA-pvwx-3jx5-24r2 Lack of type validation in agent related REST API in Jenkins |
Medium EPSS 2.73% |
>= 2.278, < 2.287 | 2.287 |
| GHSA-qxp6-27gw-99cj Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins |
Medium EPSS 0.91% |
< 2.263.3 | 2.263.3 |
| GHSA-qxp6-27gw-99cj Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins |
Medium EPSS 0.91% |
>= 2.264, < 2.276 | 2.276 |
| GHSA-pxgq-gqr9-5gwx Path traversal vulnerability in Jenkins agent names |
High EPSS 2.25% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-mj7q-cmf3-mg7h Stored XSS vulnerability in Jenkins on new item page |
Medium EPSS 1.04% |
< 2.263.2 | 2.263.2 |
| GHSA-7qf3-c2q8-69m3 Reflected XSS vulnerability in Jenkins markup formatter preview |
Medium EPSS 1.20% |
< 2.263.2 | 2.263.2 |
| GHSA-7qf3-c2q8-69m3 Reflected XSS vulnerability in Jenkins markup formatter preview |
Medium EPSS 1.20% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-cxqw-vjcr-gp5g Excessive memory allocation in graph URLs leads to denial of service in Jenkins |
Medium EPSS 1.46% |
< 2.263.2 | 2.263.2 |
| GHSA-cxqw-vjcr-gp5g Excessive memory allocation in graph URLs leads to denial of service in Jenkins |
Medium EPSS 1.46% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-mj7q-cmf3-mg7h Stored XSS vulnerability in Jenkins on new item page |
Medium EPSS 1.04% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-pxgq-gqr9-5gwx Path traversal vulnerability in Jenkins agent names |
High EPSS 2.25% |
< 2.263.2 | 2.263.2 |
| GHSA-qv6f-rcv6-6q3x Improper handling of REST API XML deserialization errors in Jenkins |
High EPSS 1.70% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-4625-q52w-39cx Missing permission check for paths with specific prefix in Jenkins |
Medium EPSS 1.32% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-vpjm-58cw-r8q5 Arbitrary file read vulnerability in workspace browsers in Jenkins |
Medium EPSS 2.25% |
< 2.263.2 | 2.263.2 |
| GHSA-vpjm-58cw-r8q5 Arbitrary file read vulnerability in workspace browsers in Jenkins |
Medium EPSS 2.25% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-4625-q52w-39cx Missing permission check for paths with specific prefix in Jenkins |
Medium EPSS 1.32% |
< 2.263.2 | 2.263.2 |
| GHSA-wv63-gwr9-5c55 Stored XSS vulnerability in Jenkins button labels |
Medium EPSS 1.04% |
>= 2.263.2, < 2.275 | 2.275 |
| GHSA-wv63-gwr9-5c55 Stored XSS vulnerability in Jenkins button labels |
Medium EPSS 1.04% |
< 2.275 | 2.275 |
| GHSA-qv6f-rcv6-6q3x Improper handling of REST API XML deserialization errors in Jenkins |
High EPSS 1.70% |
< 2.263.2 | 2.263.2 |
| GHSA-f585-9fw3-rj2m Arbitrary file existence check in file fingerprints in Jenkins |
Medium EPSS 1.23% |
< 2.263.2 | 2.263.2 |
| GHSA-98gq-6hxg-52r6 XSS vulnerability in Jenkins notification bar |
Medium EPSS 1.04% |
< 2.275 | 2.275 |
| GHSA-98gq-6hxg-52r6 XSS vulnerability in Jenkins notification bar |
Medium EPSS 1.04% |
>= 2.263.2, < 2.275 | 2.275 |
| GHSA-f585-9fw3-rj2m Arbitrary file existence check in file fingerprints in Jenkins |
Medium EPSS 1.23% |
>= 2.264, < 2.275 | 2.275 |
| GHSA-hvmc-7g2x-r3p9 Jenkins Cross-Site Scripting vulnerability in help icons |
High EPSS 6.77% |
< 2.235.4 | 2.235.4 |
| GHSA-9g4m-ffx6-c29g Jenkins Cross-site Scripting vulnerability in project naming strategy |
High EPSS 82.73% |
< 2.235.4 | 2.235.4 |
| GHSA-9g4m-ffx6-c29g Jenkins Cross-site Scripting vulnerability in project naming strategy |
High EPSS 82.73% |
>= 2.236, < 2.252 | 2.252 |
| GHSA-jpvq-v729-7j2h Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 5.30% |
>= 2.237, < 2.252 | 2.252 |
| GHSA-jpvq-v729-7j2h Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 5.30% |
< 2.235.4 | 2.235.4 |
| GHSA-hvmc-7g2x-r3p9 Jenkins Cross-Site Scripting vulnerability in help icons |
High EPSS 6.77% |
>= 2.236, < 2.252 | 2.252 |
| GHSA-864v-5q2g-fr64 Stored XSS vulnerability in Jenkins 'keep forever' badge icon |
High EPSS 1.13% |
< 2.235.2 | 2.235.2 |
| GHSA-864v-5q2g-fr64 Stored XSS vulnerability in Jenkins 'keep forever' badge icon |
High EPSS 1.13% |
>= 2.236, < 2.245 | 2.245 |
| GHSA-qgj4-rc8m-44mq Stored XSS vulnerability in Jenkins job build time trend |
High EPSS 1.02% |
>= 2.236, < 2.245 | 2.245 |
| GHSA-qgj4-rc8m-44mq Stored XSS vulnerability in Jenkins job build time trend |
High EPSS 1.02% |
< 2.235.2 | 2.235.2 |
| GHSA-gfhj-524q-gcrm Stored XSS vulnerability in Jenkins console links |
High EPSS 1.03% |
< 2.235.2 | 2.235.2 |
| GHSA-g4j6-m3m3-crw8 Stored XSS vulnerability in Jenkins upstream cause |
High EPSS 1.08% |
< 2.235.2 | 2.235.2 |
| GHSA-g4j6-m3m3-crw8 Stored XSS vulnerability in Jenkins upstream cause |
High EPSS 1.08% |
>= 2.236, < 2.245 | 2.245 |
| GHSA-gfhj-524q-gcrm Stored XSS vulnerability in Jenkins console links |
High EPSS 1.03% |
>= 2.236, < 2.245 | 2.245 |
| GHSA-g8pg-qrvm-wgh2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.24% |
>= 2.204.6, < 2.228 | 2.228 |
| GHSA-2xcm-h7vv-g8m9 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.16% |
< 2.228 | 2.228 |
| GHSA-c735-g9f2-2mvp Cross-Site Request Forgery in Jenkins |
High EPSS 2.04% |
< 2.204.6 | 2.204.6 |
| GHSA-c735-g9f2-2mvp Cross-Site Request Forgery in Jenkins |
High EPSS 2.04% |
>= 2.205, < 2.228 | 2.228 |
| GHSA-2xcm-h7vv-g8m9 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.16% |
>= 2.204.6, < 2.228 | 2.228 |
| GHSA-crg2-6xv3-qg5f Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.16% |
< 2.228 | 2.228 |
| GHSA-g8pg-qrvm-wgh2 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.24% |
< 2.228 | 2.228 |
| GHSA-crg2-6xv3-qg5f Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.16% |
>= 2.204.6, < 2.228 | 2.228 |
| GHSA-7xp8-7wqx-5hqx Jenkins REST APIs vulnerable to clickjacking |
Low EPSS 1.85% |
< 2.204.2 | 2.204.2 |
| GHSA-7xp8-7wqx-5hqx Jenkins REST APIs vulnerable to clickjacking |
Low EPSS 1.85% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-w7jr-wqw6-54xc Non-constant time comparison of inbound TCP agent connection secret |
Medium EPSS 1.37% |
< 2.204.2 | 2.204.2 |
| GHSA-qp4f-2w67-c8hw Inbound TCP Agent Protocol/3 authentication bypass in Jenkins |
High EPSS 1.01% |
< 2.204.2 | 2.204.2 |
| GHSA-qp4f-2w67-c8hw Inbound TCP Agent Protocol/3 authentication bypass in Jenkins |
High EPSS 1.01% |
>= 2.205, < 2.214 | 2.214 |
| GHSA-r78q-qgx6-64pp Memory usage graphs accessible to anyone with Overall/Read |
Medium EPSS 1.07% |
< 2.204.2 | 2.204.2 |
| GHSA-r78q-qgx6-64pp Memory usage graphs accessible to anyone with Overall/Read |
Medium EPSS 1.07% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-4jjj-cm7q-v6hr Jenkins Diagnostic page exposed session cookies |
Medium EPSS 7.04% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-4jjj-cm7q-v6hr Jenkins Diagnostic page exposed session cookies |
Medium EPSS 7.04% |
< 2.204.2 | 2.204.2 |
| GHSA-gpxv-776p-7gc7 Jenkins vulnerable to UDP amplification reflection attack |
Medium EPSS 3.44% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-gpxv-776p-7gc7 Jenkins vulnerable to UDP amplification reflection attack |
Medium EPSS 3.44% |
< 2.204.2 | 2.204.2 |
| GHSA-fj6f-6933-839j Non-constant time HMAC comparison |
Medium EPSS 1.40% |
< 2.204.2 | 2.204.2 |
| GHSA-fj6f-6933-839j Non-constant time HMAC comparison |
Medium EPSS 1.40% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-w7jr-wqw6-54xc Non-constant time comparison of inbound TCP agent connection secret |
Medium EPSS 1.37% |
>= 2.205, < 2.219 | 2.219 |
| GHSA-qg7x-4h4q-3m49 XML external entity (XXE) vulnerability in Jenkins |
High EPSS 1.41% |
>= 1.597, < 1.600 | 1.600 |
| GHSA-qj27-w92h-fc9r XML external entity (XXE) vulnerability in Jenkins |
High EPSS 1.41% |
< 1.596.1 | 1.596.1 |
| GHSA-qj27-w92h-fc9r XML external entity (XXE) vulnerability in Jenkins |
High EPSS 1.41% |
>= 1.597, < 1.600 | 1.600 |
| GHSA-qg7x-4h4q-3m49 XML external entity (XXE) vulnerability in Jenkins |
High EPSS 1.41% |
< 1.596.1 | 1.596.1 |
| GHSA-vcr8-h8qp-qj8h Cross-Site Request Forgery in Jenkins |
High EPSS 1.57% |
< 2.176.3 | 2.176.3 |
| GHSA-9m48-54pj-h248 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.37% |
< 2.176.3 | 2.176.3 |
| GHSA-9m48-54pj-h248 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.37% |
>= 2.177, < 2.192 | 2.192 |
| GHSA-vcr8-h8qp-qj8h Cross-Site Request Forgery in Jenkins |
High EPSS 1.57% |
>= 2.177, < 2.192 | 2.192 |
| GHSA-hcxf-rq72-h4rr Cross-Site Request Forgery in Jenkins |
High EPSS 1.50% |
>= 2.177, < 2.186 | 2.186 |
| GHSA-6jfc-mc97-c7wg Missing Authorization in Jenkins |
Medium EPSS 1.65% |
< 2.176.2 | 2.176.2 |
| GHSA-hcxf-rq72-h4rr Cross-Site Request Forgery in Jenkins |
High EPSS 1.50% |
< 2.176.2 | 2.176.2 |
| GHSA-qr42-82qj-mw65 Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 10.22% |
>= 2.177, < 2.186 | 2.186 |
| GHSA-6jfc-mc97-c7wg Missing Authorization in Jenkins |
Medium EPSS 1.65% |
>= 2.177, < 2.186 | 2.186 |
| GHSA-qr42-82qj-mw65 Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 10.22% |
< 2.176.2 | 2.176.2 |
| GHSA-q3rp-555r-hh6r Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.23% |
>= 1.410, < 1.438 | 1.438 |
| GHSA-q3rp-555r-hh6r Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.23% |
< 1.409.3 | 1.409.3 |
| GHSA-9c26-cf8c-mw43 Jenkins allows Remote Attackers to Hijack Sessions |
Medium EPSS 1.55% |
< 1.532.2 | 1.532.2 |
| GHSA-9c26-cf8c-mw43 Jenkins allows Remote Attackers to Hijack Sessions |
Medium EPSS 1.55% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-h5jv-hg68-mjhg Jenkins allows attackers to configure restricted projects |
Medium EPSS 1.61% |
>= 1.481, < 1.502 | 1.502 |
| GHSA-h5jv-hg68-mjhg Jenkins allows attackers to configure restricted projects |
Medium EPSS 1.61% |
< 1.480.3 | 1.480.3 |
| GHSA-7fpg-pp3m-h22f Jenkins allows attackers to execute arbitrary jobs |
Medium EPSS 1.84% |
< 1.532.2 | 1.532.2 |
| GHSA-7fpg-pp3m-h22f Jenkins allows attackers to execute arbitrary jobs |
Medium EPSS 1.84% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-rxfv-gm5x-9wqj Jenkin allows attackers to obtain passwords by reading the HTML source code |
Medium EPSS 2.05% |
< 1.532.2 | 1.532.2 |
| GHSA-vxc6-wvh8-fpxw Jenkins does not invalidate the API token when a user is deleted |
Medium EPSS 1.75% |
< 1.532.2 | 1.532.2 |
| GHSA-w3f5-gq7j-m797 Jenkins Vulnerable to Clickjacking |
Medium EPSS 2.33% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-w3f5-gq7j-m797 Jenkins Vulnerable to Clickjacking |
Medium EPSS 2.33% |
< 1.532.2 | 1.532.2 |
| GHSA-rxfv-gm5x-9wqj Jenkin allows attackers to obtain passwords by reading the HTML source code |
Medium EPSS 2.05% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-vxc6-wvh8-fpxw Jenkins does not invalidate the API token when a user is deleted |
Medium EPSS 1.75% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-9vg9-x38g-9hfx Jenkins allows attackers to determine whether a user exists |
Medium EPSS 2.95% |
< 1.532.2 | 1.532.2 |
| GHSA-9vg9-x38g-9hfx Jenkins allows attackers to determine whether a user exists |
Medium EPSS 2.95% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-pv88-j6rg-r56p Jenkins allows attackers to obtain sensitive information |
Low EPSS 1.43% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-fxj8-cqcp-3vgq Jenkins cross-site scripting (XSS) vulnerability |
Medium EPSS 1.77% |
< 1.532.2 | 1.532.2 |
| GHSA-pv88-j6rg-r56p Jenkins allows attackers to obtain sensitive information |
Low EPSS 1.43% |
< 1.532.2 | 1.532.2 |
| GHSA-fxj8-cqcp-3vgq Jenkins cross-site scripting (XSS) vulnerability |
Medium EPSS 1.77% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-8jfx-h6q2-v4g3 Jenkins session fixation vulnerability |
Medium EPSS 2.06% |
< 1.532.2 | 1.532.2 |
| GHSA-8jfx-h6q2-v4g3 Jenkins session fixation vulnerability |
Medium EPSS 2.06% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-r5m2-g5gc-q43r Jenkins Denial of Service vulnerability |
Medium EPSS 1.84% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-r5m2-g5gc-q43r Jenkins Denial of Service vulnerability |
Medium EPSS 1.84% |
< 1.565.3 | 1.565.3 |
| GHSA-x3p3-929j-pq66 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.25% |
< 1.625.2 | 1.625.2 |
| GHSA-x3p3-929j-pq66 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.25% |
>= 1.626, < 1.640 | 1.640 |
| GHSA-66cr-6whx-732p Jenkins improperly ensures trust separation |
Medium EPSS 2.50% |
< 1.587 | 1.587 |
| GHSA-fxqr-px2m-fvc2 Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.77% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-64mc-2m9p-23c8 Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs |
Medium EPSS 1.38% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-64mc-2m9p-23c8 Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs |
Medium EPSS 1.38% |
< 1.565.3 | 1.565.3 |
| GHSA-fxqr-px2m-fvc2 Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.77% |
< 1.565.3 | 1.565.3 |
| GHSA-fvfh-8mj3-23xj Jenkins allows for Code Execution via Crafted Packet to the CLI |
Medium EPSS 3.65% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-fvfh-8mj3-23xj Jenkins allows for Code Execution via Crafted Packet to the CLI |
Medium EPSS 3.65% |
< 1.565.3 | 1.565.3 |
| GHSA-5xm3-48v5-6h7v Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code |
Medium EPSS 1.36% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-5xm3-48v5-6h7v Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code |
Medium EPSS 1.36% |
< 1.565.3 | 1.565.3 |
| GHSA-37wm-28rm-56vw Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation |
Medium EPSS 1.57% |
>= 1.597, < 1.600 | 1.600 |
| GHSA-37wm-28rm-56vw Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation |
Medium EPSS 1.57% |
< 1.596.1 | 1.596.1 |
| GHSA-mm9c-4cv4-7rfv Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Medium EPSS 2.52% |
< 1.596.1 | 1.596.1 |
| GHSA-mm9c-4cv4-7rfv Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Medium EPSS 2.52% |
>= 1.597, < 1.600 | 1.600 |
| GHSA-9h85-v6xf-h26q Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.77% |
< 1.596.2 | 1.596.2 |
| GHSA-8x8p-mfwv-9fjw Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.36% |
< 1.565.3 | 1.565.3 |
| GHSA-9h85-v6xf-h26q Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.77% |
>= 1.597, < 1.606 | 1.606 |
| GHSA-8x8p-mfwv-9fjw Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
Medium EPSS 1.36% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-w5v7-q2j4-fvpf Jenkins Cross-site Scripting vulnerability |
Medium EPSS 1.77% |
>= 1.600, < 1.606 | 1.606 |
| GHSA-w5v7-q2j4-fvpf Jenkins Cross-site Scripting vulnerability |
Medium EPSS 1.77% |
< 1.596.2 | 1.596.2 |
| GHSA-3rwx-3vwh-mwxc Jenkins Vulnerable to Denial of Service (DoS) |
Low EPSS 1.58% |
< 1.596.1 | 1.596.1 |
| GHSA-3rwx-3vwh-mwxc Jenkins Vulnerable to Denial of Service (DoS) |
Low EPSS 1.58% |
>= 1.597, < 1.600 | 1.600 |
| GHSA-3269-jqp5-v8c9 Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Medium EPSS 2.35% |
< 1.596.2 | 1.596.2 |
| GHSA-3269-jqp5-v8c9 Jenkins allows for Privilege Escalation by Remote Authenticated Users |
Medium EPSS 2.35% |
>= 1.597, < 1.606 | 1.606 |
| GHSA-fg4r-f9j2-36mw Jenkins Cross-Site Request Forgery vulnerabilities |
Medium EPSS 1.62% |
>= 1.513, < 1.514 | 1.514 |
| GHSA-fg4r-f9j2-36mw Jenkins Cross-Site Request Forgery vulnerabilities |
Medium EPSS 1.62% |
< 1.509.1 | 1.509.1 |
| GHSA-92mr-4w2q-4578 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Critical EPSS 1.72% |
>= 1.498, < 2.32.2 | 2.32.2 |
| GHSA-92mr-4w2q-4578 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Critical EPSS 1.72% |
>= 2.40, < 2.44 | 2.44 |
| GHSA-52g6-pfrq-rxfv Jenkins allows Cross-Site Scripting (XSS) in User Configuration |
Low EPSS 5.41% |
<= 1.523 | No fix yet |
| GHSA-v759-3fh9-84mx Jenkins directory traversal vulnerability |
Medium EPSS 2.58% |
< 1.532.2 | 1.532.2 |
| GHSA-v759-3fh9-84mx Jenkins directory traversal vulnerability |
Medium EPSS 2.58% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-vj6q-v2h7-6q5m Jenkins cross-site scripting (XSS) vulnerability |
Medium EPSS 1.41% |
>= 1.533, < 1.551 | 1.551 |
| GHSA-vj6q-v2h7-6q5m Jenkins cross-site scripting (XSS) vulnerability |
Medium EPSS 1.41% |
< 1.532.2 | 1.532.2 |
| GHSA-3gp5-92h5-h855 Jenkins Path Traversal vulnerability |
Medium EPSS 2.47% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-3gp5-92h5-h855 Jenkins Path Traversal vulnerability |
Medium EPSS 2.47% |
< 1.565.3 | 1.565.3 |
| GHSA-7f6w-fhmr-j8hq Jenkins HttpOnly flag not Set for session cookies |
Medium EPSS 2.72% |
< 1.586 | 1.586 |
| GHSA-g7cf-wg27-qw87 Jenkins secure flag not set on session cookies |
Medium EPSS 2.72% |
< 1.586 | 1.586 |
| GHSA-x3rc-cxv7-6xp6 Cross-site Scripting in Jenkins Core |
Medium EPSS 1.15% |
< 2.94 | 2.94 |
| GHSA-8p3c-m625-wh83 Jenkins has CRLF Injection Vulnerability in the CLI |
Medium EPSS 1.79% |
< 1.642.2 | 1.642.2 |
| GHSA-8p3c-m625-wh83 Jenkins has CRLF Injection Vulnerability in the CLI |
Medium EPSS 1.79% |
>= 1.643, < 1.650 | 1.650 |
| GHSA-jgpr-qrw2-6gp3 Exposure of Sensitive Information in Jenkins Core |
Medium EPSS 2.10% |
< 1.650 | 1.650 |
| GHSA-j7q5-h445-f7pc Jenkins allows Execution of Code by Opening a JRMP Listener |
Critical EPSS 11.84% |
>= 1.643, < 1.650 | 1.650 |
| GHSA-j7q5-h445-f7pc Jenkins allows Execution of Code by Opening a JRMP Listener |
Critical EPSS 11.84% |
< 1.642.2 | 1.642.2 |
| GHSA-45rg-g72w-r393 Jenkins allows Deserialization of Untrusted Data via an XML File |
High EPSS 83.26% |
< 1.642.2 | 1.642.2 |
| GHSA-45rg-g72w-r393 Jenkins allows Deserialization of Untrusted Data via an XML File |
High EPSS 83.26% |
>= 1.643, < 1.650 | 1.650 |
| GHSA-jmw7-ph6p-33cc Exposure of Sensitive Information in Jenkins Core |
Critical EPSS 2.71% |
< 1.650 | 1.650 |
| GHSA-qf2h-h3xq-j93j Jenkins allows Remote Users to Inject Build Parameters |
Medium EPSS 2.12% |
< 1.651.2 | 1.651.2 |
| GHSA-qf2h-h3xq-j93j Jenkins allows Remote Users to Inject Build Parameters |
Medium EPSS 2.12% |
>= 1.660, < 2.3 | 2.3 |
| GHSA-8572-5jrg-mx52 Exposure of Sensitive Information in Jenkins Core |
Medium EPSS 1.93% |
< 2.3 | 2.3 |
| GHSA-7vvj-qqvj-h8mc Jenkins Exposes Sensitive Information from Job Configuration |
Medium EPSS 2.19% |
< 1.651.2 | 1.651.2 |
| GHSA-7vvj-qqvj-h8mc Jenkins Exposes Sensitive Information from Job Configuration |
Medium EPSS 2.19% |
>= 1.652, < 2.3 | 2.3 |
| GHSA-rx4r-gxpc-h85x Jenkins affected by Open Redirect Vulnerability |
High EPSS 2.31% |
>= 1.652, < 2.3 | 2.3 |
| GHSA-rx4r-gxpc-h85x Jenkins affected by Open Redirect Vulnerability |
High EPSS 2.31% |
< 1.651.2 | 1.651.2 |
| GHSA-59fm-6x3q-q3q5 Missing permissions check in Jenkins Core |
Medium EPSS 2.39% |
< 2.3 | 2.3 |
| GHSA-3857-xm38-jmq2 Incorrect Authorization in Jenkins Core |
Medium EPSS 2.29% |
< 2.3 | 2.3 |
| GHSA-6cr3-cm5h-8q96 Jenkins Exposes Sensitive Information via API URL |
Medium EPSS 2.31% |
< 1.651.2 | 1.651.2 |
| GHSA-6cr3-cm5h-8q96 Jenkins Exposes Sensitive Information via API URL |
Medium EPSS 2.31% |
>= 1.652, < 2.3 | 2.3 |
| GHSA-r5x3-2446-hrp7 Race Condition in Jenkins |
High EPSS 1.15% |
>= 2.81, < 2.89.2 | 2.89.2 |
| GHSA-r5x3-2446-hrp7 Race Condition in Jenkins |
High EPSS 1.15% |
>= 2.90, < 2.95 | 2.95 |
| GHSA-85wq-pqhp-hmq6 Cross-Site Request Forgery in Jenkins |
High EPSS 6.96% |
>= 2.50, < 2.57 | 2.57 |
| GHSA-4466-8jm4-448p Deserialization of Untrusted Data in Jenkins |
Medium EPSS 1.74% |
>= 2.50, < 2.57 | 2.57 |
| GHSA-4466-8jm4-448p Deserialization of Untrusted Data in Jenkins |
Medium EPSS 1.74% |
< 2.46.2 | 2.46.2 |
| GHSA-85wq-pqhp-hmq6 Cross-Site Request Forgery in Jenkins |
High EPSS 6.96% |
< 2.46.2 | 2.46.2 |
| GHSA-r57f-7xw3-q2r9 Improper Authentication in Jenkins |
High EPSS 1.21% |
< 2.46.2 | 2.46.2 |
| GHSA-r57f-7xw3-q2r9 Improper Authentication in Jenkins |
High EPSS 1.21% |
>= 2.50, < 2.57 | 2.57 |
| GHSA-mqgf-4rw4-2cq2 Jenkins affected by Open Redirect Vulnerability |
Low EPSS 1.82% |
>= 1.481, < 1.491 | 1.491 |
| GHSA-2q8v-qx2x-hxjx Jenkins allows HTTP Injection and Response Splitting |
Medium EPSS 1.82% |
>= 1.481, < 1.491 | 1.491 |
| GHSA-mqgf-4rw4-2cq2 Jenkins affected by Open Redirect Vulnerability |
Low EPSS 1.82% |
< 1.480.1 | 1.480.1 |
| GHSA-9hr6-5x6g-gg5g Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.42% |
< 1.480.1 | 1.480.1 |
| GHSA-9hr6-5x6g-gg5g Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.42% |
>= 1.481, < 1.491 | 1.491 |
| GHSA-2q8v-qx2x-hxjx Jenkins allows HTTP Injection and Response Splitting |
Medium EPSS 1.82% |
< 1.480.1 | 1.480.1 |
| GHSA-826f-32qm-vm3j Jenkins vulnerable to Cross-site Scripting |
Medium EPSS 1.91% |
>= 1.513, < 1.514 | 1.514 |
| GHSA-826f-32qm-vm3j Jenkins vulnerable to Cross-site Scripting |
Medium EPSS 1.91% |
< 1.509.1 | 1.509.1 |
| GHSA-cwh9-f8m6-6r63 Jenkins Cross-site Scripting vulnerability |
Medium EPSS 2.13% |
>= 1.566, < 1.583 | 1.583 |
| GHSA-cwh9-f8m6-6r63 Jenkins Cross-site Scripting vulnerability |
Medium EPSS 2.13% |
< 1.565.3 | 1.565.3 |
| GHSA-2pp9-r4rv-6p6j Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 0.95% |
< 2.121.2 | 2.121.2 |
| GHSA-2pp9-r4rv-6p6j Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 0.95% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-28p3-mchr-9frj Deserialization of Untrusted Data in Jenkins |
Medium EPSS 1.46% |
< 2.121.3 | 2.121.3 |
| GHSA-q4cq-r7hg-pxqq Improper Authentication in Jenkins |
Medium EPSS 0.87% |
>= 2.122, < 2.138 | 2.138 |
| GHSA-q4cq-r7hg-pxqq Improper Authentication in Jenkins |
Medium EPSS 0.87% |
< 2.121.3 | 2.121.3 |
| GHSA-667q-vj58-rj88 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.25% |
>= 2.122, < 2.138 | 2.138 |
| GHSA-28p3-mchr-9frj Deserialization of Untrusted Data in Jenkins |
Medium EPSS 1.46% |
>= 2.122, < 2.138 | 2.138 |
| GHSA-667q-vj58-rj88 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.25% |
< 2.121.3 | 2.121.3 |
| GHSA-53jp-gmwc-jwf6 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
High EPSS 0.43% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-99hj-ppg3-2xwc Cross-Site Request Forgery in Jenkins |
High EPSS 1.02% |
>= 2.90, < 2.95 | 2.95 |
| GHSA-hph9-9vcq-f7gp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.37% |
>= 2.140, < 2.154 | 2.154 |
| GHSA-g78x-xmv8-23xp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.01% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-g78x-xmv8-23xp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.01% |
< 2.73.2 | 2.73.2 |
| GHSA-3pr8-rf62-g893 Path Traversal in Jenkins |
Medium EPSS 4.02% |
< 2.138.2 | 2.138.2 |
| GHSA-3pr8-rf62-g893 Path Traversal in Jenkins |
Medium EPSS 4.02% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-hph9-9vcq-f7gp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.37% |
< 2.138.4 | 2.138.4 |
| GHSA-hv45-5j9h-7fhg Cross-site Scripting in Jenkins |
Medium EPSS 1.53% |
< 2.138.2 | 2.138.2 |
| GHSA-hv45-5j9h-7fhg Cross-site Scripting in Jenkins |
Medium EPSS 1.53% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-99hj-ppg3-2xwc Cross-Site Request Forgery in Jenkins |
High EPSS 1.02% |
>= 2.81, < 2.89.2 | 2.89.2 |
| GHSA-53jp-gmwc-jwf6 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
High EPSS 0.43% |
< 2.138.2 | 2.138.2 |
| GHSA-rr6r-p7rw-369c Session Fixation in Jenkins |
Medium EPSS 1.22% |
< 2.138.2 | 2.138.2 |
| GHSA-rr6r-p7rw-369c Session Fixation in Jenkins |
Medium EPSS 1.22% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-9jcv-v4jp-w3cq Cross-site Scripting in Jenkins Core |
Medium EPSS 0.87% |
< 2.107.2 | 2.107.2 |
| GHSA-9jcv-v4jp-w3cq Cross-site Scripting in Jenkins Core |
Medium EPSS 0.87% |
>= 2.108, < 2.116 | 2.116 |
| GHSA-fq9f-9wv9-rfmg Improper Certificate Validation in Jenkins |
Medium EPSS 0.50% |
< 2.73.2 | 2.73.2 |
| GHSA-h8c5-c92g-jq6x Improper Input Validation in Jenkins |
Low EPSS 0.39% |
< 2.73.2 | 2.73.2 |
| GHSA-wqv4-9gr3-3qgh Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.31% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-h972-cwjv-2v39 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.01% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-h972-cwjv-2v39 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.01% |
< 2.73.2 | 2.73.2 |
| GHSA-h8c5-c92g-jq6x Improper Input Validation in Jenkins |
Low EPSS 0.39% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-wqv4-9gr3-3qgh Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.31% |
< 2.73.2 | 2.73.2 |
| GHSA-5hfp-964w-5vgm Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 3.26% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-fq9f-9wv9-rfmg Improper Certificate Validation in Jenkins |
Medium EPSS 0.50% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-5hfp-964w-5vgm Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 3.26% |
< 2.138.2 | 2.138.2 |
| GHSA-f7f6-xrwc-9c57 Improper Input Validation in Jenkins |
High EPSS 1.15% |
< 2.73.2 | 2.73.2 |
| GHSA-f7f6-xrwc-9c57 Improper Input Validation in Jenkins |
High EPSS 1.15% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-j472-mcq2-95p6 OS Command Injection in Jenkins |
High EPSS 2.56% |
< 2.73.2 | 2.73.2 |
| GHSA-wfj3-535m-p6fx Improper Input Validation in Jenkins |
High EPSS 1.50% |
< 2.73.3 | 2.73.3 |
| GHSA-wfj3-535m-p6fx Improper Input Validation in Jenkins |
High EPSS 1.50% |
>= 2.74, < 2.89 | 2.89 |
| GHSA-j472-mcq2-95p6 OS Command Injection in Jenkins |
High EPSS 2.56% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-5ppx-rgw2-xg23 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.13% |
< 2.73.3 | 2.73.3 |
| GHSA-5ppx-rgw2-xg23 Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.13% |
>= 2.74, < 2.89 | 2.89 |
| GHSA-2x9h-h3c4-wqqh Improper Neutralization of Special Elements used in an LDAP Query in Jenkins |
Critical EPSS 96.94% |
>= 2.20, < 2.32 | 2.32 |
| GHSA-2x9h-h3c4-wqqh Improper Neutralization of Special Elements used in an LDAP Query in Jenkins |
Critical EPSS 96.94% |
< 2.19.3 | 2.19.3 |
| GHSA-cpw3-x7gf-p872 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.38% |
< 2.107.2 | 2.107.2 |
| GHSA-cpw3-x7gf-p872 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.38% |
>= 2.108, < 2.116 | 2.116 |
| GHSA-r2jf-rc5v-vmpv Incorrect Authorization in Jenkins |
Medium EPSS 0.77% |
>= 2.122, < 2.138 | 2.138 |
| GHSA-r2jf-rc5v-vmpv Incorrect Authorization in Jenkins |
Medium EPSS 0.77% |
< 2.121.3 | 2.121.3 |
| GHSA-8qpf-fv36-h4r8 Infinite Loop in Jenkins Core |
Medium EPSS 1.17% |
< 2.138 | 2.138 |
| GHSA-2632-h32j-6rg9 Missing Release of Resource after Effective Lifetime in Jenkins |
High EPSS 1.67% |
>= 2.122, < 2.138 | 2.138 |
| GHSA-2632-h32j-6rg9 Missing Release of Resource after Effective Lifetime in Jenkins |
High EPSS 1.67% |
< 2.121.3 | 2.121.3 |
| GHSA-9cjv-93g7-c6mv Loop with Unreachable Exit Condition in Jenkins |
Medium EPSS 2.75% |
< 2.138.4 | 2.138.4 |
| GHSA-9cjv-93g7-c6mv Loop with Unreachable Exit Condition in Jenkins |
Medium EPSS 2.75% |
>= 2.140, < 2.154 | 2.154 |
| GHSA-4jhm-5f7g-75fp Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
High EPSS 6.76% |
>= 2.140, < 2.154 | 2.154 |
| GHSA-4jhm-5f7g-75fp Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
High EPSS 6.76% |
< 2.138.4 | 2.138.4 |
| GHSA-4h47-h3cr-23wh Improper Authorization in Jenkins |
Medium EPSS 1.47% |
< 2.138.2 | 2.138.2 |
| GHSA-4h47-h3cr-23wh Improper Authorization in Jenkins |
Medium EPSS 1.47% |
>= 2.140, < 2.146 | 2.146 |
| GHSA-r9q2-3r6x-qmgp Inadequate Encryption Strength in Jenkins |
Medium EPSS 1.03% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-ffgg-vphh-v273 Incomplete List of Disallowed Inputs in Jenkins |
Medium EPSS 1.52% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-ffgg-vphh-v273 Incomplete List of Disallowed Inputs in Jenkins |
Medium EPSS 1.52% |
< 2.32.2 | 2.32.2 |
| GHSA-r9q2-3r6x-qmgp Inadequate Encryption Strength in Jenkins |
Medium EPSS 1.03% |
< 2.32.2 | 2.32.2 |
| GHSA-wj5c-j656-h5fw Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.03% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-wj5c-j656-h5fw Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.03% |
< 2.32.2 | 2.32.2 |
| GHSA-x55p-6526-xmmp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Low EPSS 1.00% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-pwv6-872c-gcg6 Cross-Site Request Forgery in Jenkins |
Medium EPSS 1.60% |
< 2.32.2 | 2.32.2 |
| GHSA-pwv6-872c-gcg6 Cross-Site Request Forgery in Jenkins |
Medium EPSS 1.60% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-m93h-5qmx-pphg Improper Authentication in Jenkins |
Medium EPSS 1.28% |
< 2.32.2 | 2.32.2 |
| GHSA-6967-9vvv-4cmm Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.81% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-6967-9vvv-4cmm Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.81% |
< 2.32.2 | 2.32.2 |
| GHSA-v222-w2mw-xjc6 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.70% |
< 2.32.2 | 2.32.2 |
| GHSA-v222-w2mw-xjc6 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.70% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-jff5-55xj-4jcq Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.43% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-jff5-55xj-4jcq Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.43% |
< 2.32.2 | 2.32.2 |
| GHSA-m93h-5qmx-pphg Improper Authentication in Jenkins |
Medium EPSS 1.28% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-fwqr-3pvp-pjwq Deserialization of Untrusted Data in Jenkins |
High EPSS 5.90% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-fwqr-3pvp-pjwq Deserialization of Untrusted Data in Jenkins |
High EPSS 5.90% |
< 2.32.2 | 2.32.2 |
| GHSA-wf9g-rh76-6jvr Incorrect Permission Assignment for Critical Resource in Jenkins |
Medium EPSS 1.49% |
< 2.32.2 | 2.32.2 |
| GHSA-wf9g-rh76-6jvr Incorrect Permission Assignment for Critical Resource in Jenkins |
Medium EPSS 1.49% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-x55p-6526-xmmp Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Low EPSS 1.00% |
< 2.32.2 | 2.32.2 |
| GHSA-42m6-7xff-9v9m Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.00% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-42m6-7xff-9v9m Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.00% |
< 2.32.2 | 2.32.2 |
| GHSA-3vhr-f5xr-8vpx Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
High EPSS 2.40% |
>= 1.626, < 1.640 | 1.640 |
| GHSA-3vhr-f5xr-8vpx Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
High EPSS 2.40% |
< 1.625.2 | 1.625.2 |
| GHSA-x274-9m9r-fm5g Jenkins does not Verify Checksums for Plugin Files |
High EPSS 1.40% |
>= 1.626, < 1.640 | 1.640 |
| GHSA-x274-9m9r-fm5g Jenkins does not Verify Checksums for Plugin Files |
High EPSS 1.40% |
< 1.625.2 | 1.625.2 |
| GHSA-3wmv-7php-rhg5 Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
Low EPSS 1.16% |
< 1.625.2 | 1.625.2 |
| GHSA-x4m5-j4x4-4wjg Jenkins allows Administrators to Access API Tokens |
Medium EPSS 1.49% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-x4m5-j4x4-4wjg Jenkins allows Administrators to Access API Tokens |
Medium EPSS 1.49% |
< 1.625.2 | 1.625.2 |
| GHSA-x2q2-8pwq-fr5r Jenkins allows Bypass of Access Restrictions |
Medium EPSS 1.79% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-x2q2-8pwq-fr5r Jenkins allows Bypass of Access Restrictions |
Medium EPSS 1.79% |
< 1.625.2 | 1.625.2 |
| GHSA-5xmf-9vgr-53mj Jenkins allows Unauthorized Viewing of Queue API Information |
Medium EPSS 2.06% |
< 1.625.2 | 1.625.2 |
| GHSA-5mwr-jg3r-jv66 Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.79% |
< 1.625.2 | 1.625.2 |
| GHSA-8pqx-3rxx-f5pm Jenkins discloses project names via fingerprints Known exploited |
High EPSS 23.00% |
< 1.625.2 | 1.625.2 |
| GHSA-8pqx-3rxx-f5pm Jenkins discloses project names via fingerprints Known exploited |
High EPSS 23.00% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-8pqx-3rxx-f5pm Jenkins discloses project names via fingerprints Known exploited |
High EPSS 23.00% |
< 1.625.2 | 1.625.2 |
| GHSA-8pqx-3rxx-f5pm Jenkins discloses project names via fingerprints Known exploited |
High EPSS 23.00% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-89vc-7frq-2rfj Jenkins has Local File Inclusion Vulnerability |
Medium EPSS 3.16% |
< 1.625.2 | 1.625.2 |
| GHSA-89vc-7frq-2rfj Jenkins has Local File Inclusion Vulnerability |
Medium EPSS 3.16% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-5mwr-jg3r-jv66 Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.79% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-5xmf-9vgr-53mj Jenkins allows Unauthorized Viewing of Queue API Information |
Medium EPSS 2.06% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-w7qm-fprw-cqgq Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
High EPSS 2.22% |
< 1.625.2 | 1.625.2 |
| GHSA-w7qm-fprw-cqgq Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
High EPSS 2.22% |
>= 1.626, < 1.640 | 1.640 |
| GHSA-3j9c-cp7m-8w8g Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI |
Medium EPSS 2.34% |
< 1.625.2 | 1.625.2 |
| GHSA-449q-v4j2-5h8p Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor |
Medium EPSS 2.12% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-449q-v4j2-5h8p Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor |
Medium EPSS 2.12% |
< 1.625.2 | 1.625.2 |
| GHSA-3j9c-cp7m-8w8g Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI |
Medium EPSS 2.34% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-3wmv-7php-rhg5 Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack |
Low EPSS 1.16% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-4653-rmch-3g2g Jenkins has Information Disclosure via Sidepanel Widget |
Medium EPSS 2.06% |
>= 1.626, < 1.638 | 1.638 |
| GHSA-4653-rmch-3g2g Jenkins has Information Disclosure via Sidepanel Widget |
Medium EPSS 2.06% |
< 1.625.2 | 1.625.2 |
| GHSA-p8x8-p473-mmmv Missing Authorization in Jenkins |
Medium EPSS 0.83% |
>= 2.74, < 2.84 | 2.84 |
| GHSA-p8x8-p473-mmmv Missing Authorization in Jenkins |
Medium EPSS 0.83% |
< 2.73.2 | 2.73.2 |
| GHSA-3297-944x-j7x7 Incorrect Authorization in Jenkins Core |
Medium EPSS 1.93% |
< 2.44 | 2.44 |
| GHSA-7r4h-2h23-6jq9 Incorrect Authorization in Jenkins |
Medium EPSS 1.08% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-7r4h-2h23-6jq9 Incorrect Authorization in Jenkins |
Medium EPSS 1.08% |
< 2.32.2 | 2.32.2 |
| GHSA-6rh5-23hx-j452 Improper Authorization in Jenkins Core |
High EPSS 1.54% |
>= 2.151, < 2.159 | 2.159 |
| GHSA-6rh5-23hx-j452 Improper Authorization in Jenkins Core |
High EPSS 1.54% |
< 2.150.2 | 2.150.2 |
| GHSA-8qxp-g8jv-p37x Improper Authorization in Jenkins Core |
High EPSS 1.62% |
< 2.159 | 2.159 |
| GHSA-r69c-5j7c-vm6q Cross-site Scripting in Jenkins |
Medium EPSS 2.03% |
< 2.32.2 | 2.32.2 |
| GHSA-r69c-5j7c-vm6q Cross-site Scripting in Jenkins |
Medium EPSS 2.03% |
>= 2.34, < 2.44 | 2.44 |
| GHSA-6mv9-hcx5-7mhh Server-Side Request Forgery in Jenkins |
Medium EPSS 1.70% |
< 2.89.4 | 2.89.4 |
| GHSA-26wc-3wqp-g3rp Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 99.68% |
<= 2.46.1 | No fix yet |
| GHSA-26wc-3wqp-g3rp Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 99.68% |
>= 2.50, <= 2.56 | No fix yet |
| GHSA-26wc-3wqp-g3rp Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 99.68% |
< 2.46.2 | 2.46.2 |
| GHSA-26wc-3wqp-g3rp Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 99.68% |
>= 2.50, < 2.57 | 2.57 |
| GHSA-6mv9-hcx5-7mhh Server-Side Request Forgery in Jenkins |
Medium EPSS 1.70% |
>= 2.90, < 2.107 | 2.107 |
| GHSA-qf38-f2fr-q4x9 Improper Input Validation in Jenkins |
High EPSS 86.58% |
< 2.121.2 | 2.121.2 |
| GHSA-qf38-f2fr-q4x9 Improper Input Validation in Jenkins |
High EPSS 86.58% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-x6jw-2f23-mc5j Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.96% |
>= 2.90, < 2.107 | 2.107 |
| GHSA-6456-xjm5-g3pg Cross-site scripting vulnerability exists in Jenkins and Stapler Plugin |
Medium EPSS 0.89% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-7592-93rm-6gpx Injection in Jenkins |
Medium EPSS 1.03% |
< 2.107.3 | 2.107.3 |
| GHSA-6456-xjm5-g3pg Cross-site scripting vulnerability exists in Jenkins and Stapler Plugin |
Medium EPSS 0.89% |
< 2.121.2 | 2.121.2 |
| GHSA-x6jw-2f23-mc5j Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.96% |
< 2.89.4 | 2.89.4 |
| GHSA-2w4x-rxp7-grg7 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.10% |
< 2.107.3 | 2.107.3 |
| GHSA-wmr8-25ff-ggpj Incorrect Authorization in Jenkins |
Medium EPSS 0.94% |
< 2.121.2 | 2.121.2 |
| GHSA-wmr8-25ff-ggpj Incorrect Authorization in Jenkins |
Medium EPSS 0.94% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-2w4x-rxp7-grg7 Exposure of Sensitive Information to an Unauthorized Actor in Jenkins |
Medium EPSS 1.10% |
>= 2.108, < 2.121 | 2.121 |
| GHSA-7592-93rm-6gpx Injection in Jenkins |
Medium EPSS 1.03% |
>= 2.108, < 2.121 | 2.121 |
| GHSA-rgmj-mccj-h9mx Cross-Site Request Forgery in Jenkins |
Medium EPSS 2.04% |
< 2.107.3 | 2.107.3 |
| GHSA-x646-m7x2-gcp7 Path Traversal in Jenkins |
High EPSS 2.57% |
< 2.107.3 | 2.107.3 |
| GHSA-x646-m7x2-gcp7 Path Traversal in Jenkins |
High EPSS 2.57% |
>= 2.108, < 2.121 | 2.121 |
| GHSA-742j-jcfr-23w3 Insufficient Session Expiration in Jenkins |
High EPSS 2.11% |
>= 2.165, < 2.172 | 2.172 |
| GHSA-rgmj-mccj-h9mx Cross-Site Request Forgery in Jenkins |
Medium EPSS 2.04% |
>= 2.108, < 2.121 | 2.121 |
| GHSA-742j-jcfr-23w3 Insufficient Session Expiration in Jenkins |
High EPSS 2.11% |
< 2.164.2 | 2.164.2 |
| GHSA-qpg9-83fv-x9ch Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.32% |
>= 2.165, < 2.172 | 2.172 |
| GHSA-qpg9-83fv-x9ch Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 1.32% |
< 2.164.2 | 2.164.2 |
| GHSA-5p59-v5wm-77v4 Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 3.85% |
>= 2.90, < 2.107 | 2.107 |
| GHSA-5p59-v5wm-77v4 Improper Limitation of a Pathname to a Restricted Directory in Jenkins |
Medium EPSS 3.85% |
< 2.89.4 | 2.89.4 |
| GHSA-pgxv-h967-fw2q Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 0.89% |
< 2.121.2 | 2.121.2 |
| GHSA-pgxv-h967-fw2q Improper Neutralization of Input During Web Page Generation in Jenkins |
Medium EPSS 0.89% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-j8qv-mj4r-6fw4 Improper Input Validation in Jenkins |
High EPSS 18.12% |
>= 2.122, < 2.132 | 2.132 |
| GHSA-j8qv-mj4r-6fw4 Improper Input Validation in Jenkins |
High EPSS 18.12% |
< 2.121.2 | 2.121.2 |
| GHSA-p265-xr98-3vmr Incorrect Authorization in Jenkins |
Medium EPSS 0.76% |
>= 2.122, < 2.133 | 2.133 |
| GHSA-p265-xr98-3vmr Incorrect Authorization in Jenkins |
Medium EPSS 0.76% |
< 2.121.2 | 2.121.2 |
| GHSA-q5f8-fxrx-pw6f Jenkins subject to Cross-site Scripting |
Medium EPSS 1.24% |
< 1.502 | 1.502 |
| GHSA-25c5-58xw-hw5q Jenkins allows Remote Users to Build Arbitrary Jobs |
Medium EPSS 1.76% |
>= 1.481, < 1.502 | 1.502 |
| GHSA-rqhg-cxfr-8xqw Jenkins Cross-Site Request Forgery vulnerability |
Medium EPSS 3.15% |
< 1.480.3 | 1.480.3 |
| GHSA-5c56-g5cq-4gj9 Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload |
Medium EPSS 2.00% |
< 1.480.3 | 1.480.3 |
| GHSA-25c5-58xw-hw5q Jenkins allows Remote Users to Build Arbitrary Jobs |
Medium EPSS 1.76% |
< 1.480.3 | 1.480.3 |
| GHSA-78cj-2m29-q5r9 Jenkins Cross-Site Request Forgery vulnerability |
Medium EPSS 2.31% |
< 1.480.3 | 1.480.3 |
| GHSA-78cj-2m29-q5r9 Jenkins Cross-Site Request Forgery vulnerability |
Medium EPSS 2.31% |
>= 1.481, < 1.502 | 1.502 |
| GHSA-5c56-g5cq-4gj9 Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload |
Medium EPSS 2.00% |
>= 1.481, < 1.502 | 1.502 |
| GHSA-rqhg-cxfr-8xqw Jenkins Cross-Site Request Forgery vulnerability |
Medium EPSS 3.15% |
>= 1.481, < 1.502 | 1.502 |
| GHSA-jwfr-h6jp-9p2g Jenkins allows attackers to obtain the master cryptographic key |
Low EPSS 2.46% |
< 1.480.2 | 1.480.2 |
| GHSA-jwfr-h6jp-9p2g Jenkins allows attackers to obtain the master cryptographic key |
Low EPSS 2.46% |
>= 1.481, < 1.498 | 1.498 |
| GHSA-4w4h-8qh9-342x Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.03% |
< 1.424.5 | 1.424.5 |
| GHSA-cc55-c9j4-m7cx Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.03% |
>= 1.425, < 1.454 | 1.454 |
| GHSA-cc55-c9j4-m7cx Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.03% |
< 1.424.5 | 1.424.5 |
| GHSA-4w4h-8qh9-342x Jenkins allows Cross-Site Scripting (XSS) |
Low EPSS 1.03% |
>= 1.425, < 1.454 | 1.454 |
| GHSA-pchp-c5w8-47gc Hash collision attack vulnerability in Jenkins |
High EPSS 3.35% |
< 1.424.2 | 1.424.2 |
| GHSA-pchp-c5w8-47gc Hash collision attack vulnerability in Jenkins |
High EPSS 3.35% |
>= 1.425, < 1.447 | 1.447 |
| GHSA-x97g-3gp9-cf2p Jenkins allows Cross-Site Scripting (XSS) via Crafted URL |
Medium EPSS 1.85% |
>= 1.467, < 1.482 | 1.482 |
| GHSA-wr6p-j63r-xqhv Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access |
High EPSS 2.38% |
< 1.466.2 | 1.466.2 |
| GHSA-x97g-3gp9-cf2p Jenkins allows Cross-Site Scripting (XSS) via Crafted URL |
Medium EPSS 1.85% |
< 1.466.2 | 1.466.2 |
| GHSA-wr6p-j63r-xqhv Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access |
High EPSS 2.38% |
>= 1.467, < 1.482 | 1.482 |
| GHSA-34wx-x2w9-vqm3 DoS vulnerability in bundled XStream library in Jenkins Core |
Medium EPSS 3.90% |
< 2.319.3 | 2.319.3 |
| GHSA-34wx-x2w9-vqm3 DoS vulnerability in bundled XStream library in Jenkins Core |
Medium EPSS 3.90% |
>= 2.320, < 2.334 | 2.334 |
| GHSA-p92q-7fhh-mq35 Cross-Site Request Forgery in Jenkins |
Medium EPSS 1.81% |
< 2.319.2 | 2.319.2 |
| GHSA-p92q-7fhh-mq35 Cross-Site Request Forgery in Jenkins |
Medium EPSS 1.81% |
>= 2.320, < 2.330 | 2.330 |
| CVE-2018-1000861 Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 98.33% |
>= 2.140, <= 2.153 | No fix yet |
| CVE-2018-1000861 Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 98.33% |
< 2.138.4 | 2.138.4 |
| CVE-2018-1000861 Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 98.33% |
>= 2.140, < 2.154 | 2.154 |
| CVE-2018-1000861 Deserialization of Untrusted Data in Jenkins Known exploited |
Critical EPSS 98.33% |
<= 2.138.3 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor