jenkins vulnerabilities (Bitnami)
128 vulnerabilities.
jenkinsBitnamiArbitrary file read vulnerability through the Jenkins CLI can lead to RCE9.8 CriticaljenkinsBitnamiHTTP/2 HPACK integer overflow and buffer allocation7.5 HighjenkinsBitnamiJenkins temporary uploaded file created with insecure permissions8.1 HighjenkinsBitnamiJenkins temporary uploaded file created with insecure permissions8.1 HighjenkinsBitnamiJenkins temporary plugin file created with insecure permissions8.8 HighjenkinsBitnamiJenkins Cross-site Scripting vulnerability5.4 MediumjenkinsBitnamiJenkins does not exclude sensitive build variables from search4.3 MediumjenkinsBitnamiJenkins Stored Cross-site Scripting vulnerability5.4 MediumjenkinsBitnamiEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighjenkinsBitnamiJenkins CSRF protection bypass vulnerability8.0 HighjenkinsBitnamiInformation disclosure through error stack traces related to agents5.3 MediumjenkinsBitnamiIncorrect Authorization in Jenkins Core4.4 MediumjenkinsBitnamiIncorrect Permission Preservation in Jenkins Core4.3 MediumjenkinsBitnamiDenial of service in Jenkins Core7.5 HighjenkinsBitnamiDenial of service in Jenkins Core7.5 HighjenkinsBitnamiIncorrect Authorization in Jenkins Core7.0 HighjenkinsBitnamiCross-site Scripting vulnerability in Jenkins9.6 CriticaljenkinsBitnamiJenkins vulnerable to stored cross site scripting in the I:helpIcon component5.4 MediumjenkinsBitnamiJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service7.5 HighjenkinsBitnamiUnauthorized view fragment access in Jenkins7.5 HighjenkinsBitnamiObservable timing discrepancy allows determining username validity in Jenkins7.5 HighjenkinsBitnamiCross-site Scripting vulnerability in Jenkins5.4 MediumjenkinsBitnamiCross-site Scripting vulnerability in Jenkins5.4 MediumjenkinsBitnamiCross-site Scripting vulnerability in Jenkins5.4 MediumjenkinsBitnamiCross-site Scripting vulnerability in Jenkins5.4 MediumjenkinsBitnamiDoS vulnerability in bundled XStream library in Jenkins Core7.5 HighjenkinsBitnamiDenial of Service by injecting highly recursive collections or maps in XStream7.5 HighjenkinsBitnamiCross-Site Request Forgery in Jenkins4.3 MediumjenkinsBitnamiAgent-to-controller access control allows reading/writing most content of build directories in Jenkins9.1 CriticaljenkinsBitnamiAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.8 HighjenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins7.5 HighjenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.1 HighjenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsBitnamiMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsBitnamiPath traversal vulnerability on Windows in Jenkins6.5 MediumjenkinsBitnamiImproper handling of equivalent directory names on Windows in Jenkins4.3 MediumjenkinsBitnamiSession fixation vulnerability in Jenkins7.5 HighjenkinsBitnamiImproper permission checks allow canceling queue items and aborting builds in Jenkins4.3 MediumjenkinsBitnamiView name validation bypass in Jenkins4.3 MediumjenkinsBitnamiLack of type validation in agent related REST API in Jenkins4.3 MediumjenkinsBitnamiJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources7.5 HighjenkinsBitnamiTime-of-check Time-of-use (TOCTOU) Race Condition in Jenkins5.3 MediumjenkinsBitnamiStored XSS vulnerability in Jenkins on new item page5.4 Medium- Show moreLoading…