org.jenkins-ci.main:jenkins-core vulnerabilities (Maven)
259 vulnerabilities.
org.jenkins-ci.main:jenkins-coreMavenJenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations5.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins: Stored XSS vulnerability in node offline cause description5.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins exposes other users' timezone and view names to users with Overall/Read permission4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins: Missing permission check allows unauthorized cancellation of queue items4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Open Redirect Through Newline/Tab Characters in Redirect URL4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation8.8 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation7.5 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins has a link following vulnerability allows arbitrary file creation8.8 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins has a build information disclosure vulnerability through Run Parameter4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins has a stored XSS vulnerability in node offline cause description8.0 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins has a CSRF vulnerability on the login form3.5 Loworg.jenkins-ci.main:jenkins-coreMavenJenkins's build authorization token is stored and displayed in plain text4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins's build authorization token is stored and displayed in plain text4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins is missing a permission check on password fields4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins has a Denial of service vulnerability in HTTP-based CLI7.5 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins has a log message injection vulnerability5.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins is missing a permission check in the authenticated users' profile menu4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins has a missing permission check, allowing users to obtain agent names5.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Missing Permission Check4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Missing Permission Check4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Open Redirect vulnerability4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins cross-site request forgery (CSRF) vulnerability5.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins item creation restriction bypass vulnerability4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins exposes multi-line secrets through error messages4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins does not perform a permission check in an HTTP endpoint6.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Remoting library arbitrary file read vulnerability8.8 Highorg.jenkins-ci.main:jenkins-coreMavenCross-site WebSocket hijacking vulnerability in the Jenkins CLI8.8 Highorg.jenkins-ci.main:jenkins-coreMavenArbitrary file read vulnerability through the Jenkins CLI can lead to RCE9.8 Criticalorg.jenkins-ci.main:jenkins-coreMavenJenkins temporary uploaded file created with insecure permissions8.1 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins temporary uploaded file created with insecure permissions8.1 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins temporary plugin file created with insecure permissions8.8 Highorg.jenkins-ci.main:jenkins-coreMavenJenkins Cross-site Scripting vulnerability5.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins does not exclude sensitive build variables from search4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins Stored Cross-site Scripting vulnerability5.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenJenkins CSRF protection bypass vulnerability8.0 Highorg.jenkins-ci.main:jenkins-coreMavenInformation disclosure through error stack traces related to agents5.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenIncorrect Authorization in Jenkins Core4.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenIncorrect Permission Preservation in Jenkins Core4.3 Mediumorg.jenkins-ci.main:jenkins-coreMavenDenial of service in Jenkins Core7.5 Highorg.jenkins-ci.main:jenkins-coreMavenDenial of service in Jenkins Core7.5 Highorg.jenkins-ci.main:jenkins-coreMavenIncorrect Authorization in Jenkins Core7.0 Highorg.jenkins-ci.main:jenkins-coreMavenCross-site Scripting vulnerability in Jenkins9.6 Criticalorg.jenkins-ci.main:jenkins-coreMavenJenkins vulnerable to stored cross site scripting in the I:helpIcon component5.4 Mediumorg.jenkins-ci.main:jenkins-coreMavenUnauthorized view fragment access in Jenkins7.5 Highorg.jenkins-ci.main:jenkins-coreMavenObservable timing discrepancy allows determining username validity in Jenkins7.5 Highorg.jenkins-ci.main:jenkins-coreMavenCross-site Scripting vulnerability in Jenkins5.4 Medium- Show moreLoading…