jenkins vulnerabilities (Bitnami)
128 vulnerabilities.
-
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the... 4.2 Medium -
jenkinsBitnami A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers... 4.3 Medium -
jenkinsBitnami Jenkins 2.579 and earlier, LTS 2.568.2 and earlier does not escape map keys when serializing... 4.3 Medium -
jenkinsBitnami In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins... 5.4 Medium -
jenkinsBitnami Jenkins 2.421 through 2.579 (both inclusive), LTS 2.426.1 through 2.568.2 (both inclusive) does... 3.5 Low -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a... 7.3 High -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for... 6.3 Medium -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from... 8.8 High -
jenkinsBitnami In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093... 8.8 High -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log... 8.8 High -
jenkinsBitnami In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins... 8.8 High -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field... 4.3 Medium -
jenkinsBitnami In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their... 8.8 High -
jenkinsBitnami Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that... 2.7 Low -
jenkinsBitnami Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and... 6.5 Medium -
jenkinsBitnami Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting... 4.3 Medium -
jenkinsBitnami Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with... 4.3 Medium -
jenkinsBitnami In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2... 9.0 Critical -
jenkinsBitnami Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations 5.3 Medium -
jenkinsBitnami Jenkins: Stored XSS vulnerability in node offline cause description 5.4 Medium -
jenkinsBitnami Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" 4.3 Medium -
jenkinsBitnami Jenkins exposes other users' timezone and view names to users with Overall/Read permission 4.3 Medium -
jenkinsBitnami Jenkins: Missing permission check allows unauthorized cancellation of queue items 4.3 Medium -
jenkinsBitnami Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL 4.3 Medium -
jenkinsBitnami Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL 4.3 Medium -
jenkinsBitnami Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation 8.8 High -
jenkinsBitnami Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation 7.5 High -
jenkinsBitnami Jenkins has a link following vulnerability allows arbitrary file creation 8.8 High -
jenkinsBitnami Jenkins has a build information disclosure vulnerability through Run Parameter 4.3 Medium -
jenkinsBitnami Jenkins has a stored XSS vulnerability in node offline cause description 8.0 High -
jenkinsBitnami Jenkins has a CSRF vulnerability on the login form 3.5 Low -
jenkinsBitnami Jenkins's build authorization token is stored and displayed in plain text 4.3 Medium -
jenkinsBitnami Jenkins's build authorization token is stored and displayed in plain text 4.3 Medium -
jenkinsBitnami Jenkins is missing a permission check on password fields 4.3 Medium -
jenkinsBitnami Jenkins has a Denial of service vulnerability in HTTP-based CLI 7.5 High -
jenkinsBitnami Jenkins has a log message injection vulnerability 5.3 Medium -
jenkinsBitnami Jenkins is missing a permission check in the authenticated users' profile menu 4.3 Medium -
jenkinsBitnami Jenkins has a missing permission check, allowing users to obtain agent names 5.3 Medium -
jenkinsBitnami Jenkins-image: sensitive data disclosure when using openshift jenkins image 6.5 Medium -
jenkinsBitnami Jenkins Missing Permission Check 4.3 Medium -
jenkinsBitnami Jenkins Missing Permission Check 4.3 Medium -
jenkinsBitnami Jenkins Open Redirect vulnerability 4.3 Medium -
jenkinsBitnami Jenkins cross-site request forgery (CSRF) vulnerability 5.4 Medium -
jenkinsBitnami Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission 4.3 Medium -
jenkinsBitnami Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission 4.3 Medium -
jenkinsBitnami Jenkins item creation restriction bypass vulnerability 4.3 Medium -
jenkinsBitnami Jenkins exposes multi-line secrets through error messages 4.3 Medium -
jenkinsBitnami Jenkins does not perform a permission check in an HTTP endpoint 6.3 Medium -
jenkinsBitnami Jenkins Remoting library arbitrary file read vulnerability 8.8 High -
jenkinsBitnami Cross-site WebSocket hijacking vulnerability in the Jenkins CLI 8.8 High - Show olderLoading…