317 matches found
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the global job priority configuration process. An attacker can modify configuration settings by tricking an authenticated user into submitting a malicious request. Remediation Upgrade...
Missing permission check in job-import-plugin allows enumerating credentials IDs
job-import-plugin 143.v044a2e819b27 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using anothe...
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
Overview org.jenkins-ci.plugins:matrix-auth is a The Jenkins Plugins Parent POM Project Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the inheritanceStrategy deserialization path in...
Important: Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.21 security update.
An update for Openshift Jenkins is now available for Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.21. Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.21 security update...
RHSA-2023:6179 Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
Bulletin has no description...
CVE-2018-1000190
A exposure of sensitive information vulnerability exists in Jenkins Black Duck Hub Plugin 4.0.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method...
CVE-2019-16558
Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...
EUVD-2016-4741
Malware in sbrugna...
EUVD-2015-7455
Malware in sbrugna...
EUVD-2015-5289
Malware in sbrugna...
EUVD-2013-0345
Malware in sbrugna...
EUVD-2015-1934
Malware in sbrugna...
EUVD-2020-22117
Malware in sbrugna...
EUVD-2014-3614
Malware in sbrugna...
EUVD-2025-14884
Malicious code in bioql PyPI...
EUVD-2022-7182
Malicious code in bioql PyPI...
EUVD-2022-7461
Malicious code in bioql PyPI...
EUVD-2022-7453
Malicious code in bioql PyPI...