CloudBees Jenkins Ant Plugin Cross-Site Scripting Vulnerability

CloudBees Jenkins is the U.S. CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Ant Plugin is used in one of the command-line tool plug-in . ...

Jenkins JDK / Ant Tools Job Configuration Stored XSS Vulnerability (SECURITY-624) (deprecated)

The Jenkins advisory 2018-01-22 has updated to note this vulnerability to be specific to the Ant plugin, which cannot be accurately detected remotely with this plugin. Thus this plugin has been deprecated. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/06/27 Deprecated due to...

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

PT-2017-14765

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.94 Description The issue allows remote authenticated administrators to conduct cross-site scripting XSS attacks by crafting a tool name in a job configuration form. This can be demonstrated using the JDK tool in...

ProGuard - Java class file Shrinker, Optimizer, Obfuscator and Preverifier

ProGuard is a free Java class file shrinker, optimizer, obfuscator, and preverifier. It detects and removes unused classes, fields, methods, and attributes. It optimizes bytecode and removes unused instructions. It renames the remaining classes, fields, and methods using short meaningless names...

Fedora Update for jenkins-ant-plugin FEDORA-2014-15776

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...