Jenkins XSS Vulnerability (CVE-2023-27898) - Linux

Jenkins is prone to a cross-site scripting XSS vulnerability in plugin manager. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

PT-2022-22369 · Jenkins · Jenkins Failed Job Deactivator Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Failed Job Deactivator Plugin versions 1.2.1 and earlier Jenkins versions 2.286 and earlier Jenkins LTS versions 2.277.1 and earlier Description: A cross-site request forgery CSRF issue allows attackers to disable jobs. This issue is...

PT-2021-14683 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.286 and earlier Jenkins LTS versions 2.277.1 and earlier Description: The issue arises from the improper validation of newly created view names, allowing attackers with View/Create permission to create views with invalid or...