PT-2019-14709 · Jenkins · Jenkins Build Failure Analyzer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build Failure Analyzer Plugin versions 1.24.1 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to have Jenkins evaluate a computationally expensive regular expression...

PT-2019-14710 · Jenkins · Jenkins Build Failure Analyzer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Build Failure Analyzer Plugin versions 1.24.1 and earlier Description: The issue allows attackers to have Jenkins evaluate a user-supplied regular expression without the ability to interrupt this process, as the regular expression was...

PT-2019-4690 · Python +7 · Urllib3 +7

Name of the Vulnerable Software and Affected Versions: urllib3 versions 1.24.1 and earlier Description: The issue allows for CRLF injection if the attacker controls the request parameter. This can potentially impact the confidentiality and integrity of protected information by allowing the input ...