EUVD-2022-2422

Malicious code in bioql PyPI...

EUVD-2023-0984

Malicious code in bioql PyPI...

CVE-2023-27902

CVE-2023-27902 — Normal mode Affected software: Jenkins Core (2.393 and earlier; LTS 2.375.3 and earlier). What is vulnerable: Jenkins creates temporary directories adjacent to workspace directories (often named @tmp) to store build-related temp files. When viewing job workspaces (in older builds...

Jenkins < 2.276, < 2.263.3 Arbitrary File Read Vulnerability

Jenkins is prone to an arbitrary file read vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Arbitrary file read vulnerability in workspace browsers

Due to a time-of-check to time-of-use TOCTOU race condition, the file browser for workspaces, archived artifacts, and $JENKINSHOME/userContent/ follows symbolic links to locations outside the directory being browsed in Jenkins 2.275 and LTS 2.263.2. This allows attackers with Job/Workspace...