GHSA-H5JV-HG68-MJHG Jenkins allows attackers to configure restricted projects

Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions...

GHSA-Q5F8-FXRX-PW6F Jenkins subject to Cross-site Scripting

Cross-site scripting XSS vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0327

Cross-site request forgery CSRF vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors...

PT-2013-2239 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.502 Jenkins LTS versions prior to 1.480.3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: For versions prior to...

PT-2013-2238 · Cloudbees +1 · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 1.502 Jenkins LTS versions prior to 1.480.3 Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of users via unknown vectors. Recommendations: For versions prior ...

jenkins: cause building jobs without direct access

Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote authenticated users with write access to build arbitrary jobs via unknown attack vectors...

jenkins: cross-site request forgery (CSRF) on Jenkins master

Cross-site request forgery CSRF vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors...