jenkins vulnerabilities (Alpine)

38 vulnerabilities.

• jenkins Alpine Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2022-2048 Fix available 7.5 HighJuly 7, 2022
• jenkins Alpine Observable timing discrepancy allows determining username validity in Jenkins CVE-2022-34174 Fix available 7.5 HighJune 22, 2022
• jenkins Alpine Cross-site Scripting vulnerability in Jenkins CVE-2022-34173 Fix available 5.4 MediumJune 22, 2022
• jenkins Alpine Cross-site Scripting vulnerability in Jenkins CVE-2022-34172 Fix available 5.4 MediumJune 22, 2022
• jenkins Alpine Cross-site Scripting vulnerability in Jenkins CVE-2022-34171 Fix available 5.4 MediumJune 22, 2022
• jenkins Alpine Cross-site Scripting vulnerability in Jenkins CVE-2022-34170 Fix available 5.4 MediumJune 22, 2022
• jenkins Alpine Allocation of Resources Without Limits or Throttling in Spring Framework CVE-2022-22971 Public exploitFix available 6.5 MediumMay 12, 2022
• jenkins Alpine Denial of service in Spring Framework CVE-2022-22970 Public exploitFix available 5.3 MediumMay 12, 2022
• jenkins Alpine DoS vulnerability in bundled XStream library in Jenkins Core CVE-2022-0538 Fix available 7.5 HighFebruary 9, 2022
• jenkins Alpine Cross-Site Request Forgery in Jenkins CVE-2022-20612 Fix available 4.3 MediumJanuary 12, 2022
• jenkins Alpine View name validation bypass in Jenkins CVE-2021-21640 Fix available 4.3 MediumApril 7, 2021
• jenkins Alpine Lack of type validation in agent related REST API in Jenkins CVE-2021-21639 Fix available 4.3 MediumApril 7, 2021
• jenkins Alpine Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins CVE-2021-21615 Fix available 5.3 MediumJanuary 26, 2021
• jenkins Alpine Credentials stored in plain text by Jenkins Bumblebee HP ALM Plugin CVE-2021-21614 Fix available 5.5 MediumJanuary 13, 2021
• jenkins Alpine XSS vulnerability in Jenkins TICS Plugin CVE-2021-21613 Fix available 6.1 MediumJanuary 13, 2021
• jenkins Alpine Credentials stored in plain text by Jenkins TraceTronic ECU-TEST Plugin CVE-2021-21612 Fix available 5.5 MediumJanuary 13, 2021
• jenkins Alpine Stored XSS vulnerability in Jenkins on new item page CVE-2021-21611 Fix available 5.4 MediumJanuary 13, 2021
• jenkins Alpine Reflected XSS vulnerability in Jenkins markup formatter preview CVE-2021-21610 Fix available 6.1 MediumJanuary 13, 2021
• jenkins Alpine Missing permission check for paths with specific prefix in Jenkins CVE-2021-21609 Fix available 5.3 MediumJanuary 13, 2021
• jenkins Alpine Stored XSS vulnerability in Jenkins button labels CVE-2021-21608 Fix available 5.4 MediumJanuary 13, 2021
• jenkins Alpine Excessive memory allocation in graph URLs leads to denial of service in Jenkins CVE-2021-21607 Fix available 6.5 MediumJanuary 13, 2021
• jenkins Alpine Arbitrary file existence check in file fingerprints in Jenkins CVE-2021-21606 Fix available 4.3 MediumJanuary 13, 2021
• jenkins Alpine Path traversal vulnerability in Jenkins agent names CVE-2021-21605 Fix available 8.0 HighJanuary 13, 2021
• jenkins Alpine Improper handling of REST API XML deserialization errors in Jenkins CVE-2021-21604 Fix available 8.0 HighJanuary 13, 2021
• jenkins Alpine XSS vulnerability in Jenkins notification bar CVE-2021-21603 Fix available 5.4 MediumJanuary 13, 2021
• jenkins Alpine Arbitrary file read vulnerability in workspace browsers in Jenkins CVE-2021-21602 Fix available 6.5 MediumJanuary 13, 2021
• jenkins Alpine Stored XSS vulnerability in Jenkins console links CVE-2020-2223 Fix available 5.4 MediumJuly 15, 2020
• jenkins Alpine Stored XSS vulnerability in Jenkins 'keep forever' badge icon CVE-2020-2222 Fix available 5.4 MediumJuly 15, 2020
• jenkins Alpine Stored XSS vulnerability in Jenkins upstream cause CVE-2020-2221 Fix available 5.4 MediumJuly 15, 2020
• jenkins Alpine Stored XSS vulnerability in Jenkins job build time trend CVE-2020-2220 Fix available 5.4 MediumJuly 15, 2020
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2020-2163 Fix available 5.4 MediumMarch 25, 2020
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2020-2162 Fix available 5.4 MediumMarch 25, 2020
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2020-2161 Fix available 5.4 MediumMarch 25, 2020
• jenkins Alpine Cross-Site Request Forgery in Jenkins CVE-2020-2160 Fix available 8.8 HighMarch 25, 2020
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2019-10406 Fix available 4.8 MediumSeptember 25, 2019
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2019-10402 Fix available 5.4 MediumSeptember 25, 2019
• jenkins Alpine Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2019-1003050 Fix available 5.4 MediumApril 10, 2019
• jenkins Alpine Insufficient Session Expiration in Jenkins CVE-2019-1003049 Fix available 8.1 HighApril 10, 2019