jenkins vulnerabilities (Red Hat)
372 vulnerabilities.
-
jenkinsRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
jenkinsRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
jenkinsRed Hat Eclipse Jetty HTTP clients can increase memory allocation 7.5 High -
jenkinsRed Hat CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length 7.4 High -
jenkinsRed Hat Netplex Json-smart Uncontrolled Recursion vulnerability 7.5 High -
jenkinsRed Hat Vulnerability when creating log files in github.com/golang/glog 7.1 High -
jenkinsRed Hat Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin 8.0 High -
jenkinsRed Hat Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin 8.0 High -
jenkinsRed Hat Missing permission check in Jenkins Script Security Plugin 4.3 Medium -
jenkinsRed Hat XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream 7.5 High -
jenkinsRed Hat JSON-lib mishandles an unbalanced comment string 5.3 Medium -
jenkinsRed Hat Jenkins item creation restriction bypass vulnerability 4.3 Medium -
jenkinsRed Hat Jenkins exposes multi-line secrets through error messages 4.3 Medium -
jenkinsRed Hat CVE-2024-38808: Spring Expression DoS Vulnerability 4.3 Medium -
jenkinsRed Hat Jenkins Remoting library arbitrary file read vulnerability 8.8 High -
jenkinsRed Hat Jenkins Script Security Plugin sandbox bypass vulnerability 8.8 High -
jenkinsRed Hat Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies 9.8 Critical -
jenkinsRed Hat Jenkins HTML Publisher Plugin does not properly sanitize input 6.5 Medium -
jenkinsRed Hat Infinite loop in JSON unmarshaling in google.golang.org/protobuf 7.5 High -
jenkinsRed Hat runc container breakout through process.cwd trickery and leaked fds 8.6 High -
jenkinsRed Hat Path traversal vulnerability in Jenkins Matrix Project Plugin 4.3 Medium -
jenkinsRed Hat Arbitrary file read vulnerability in Git server Plugin can lead to RCE 6.5 Medium -
jenkinsRed Hat Cross-site WebSocket hijacking vulnerability in the Jenkins CLI 8.8 High -
jenkinsRed Hat Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE 9.8 Critical -
jenkinsRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
jenkinsRed Hat HTTP/2 rapid reset can cause excessive work in net/http 7.5 High -
jenkinsRed Hat Jenkins Blue Ocean Plugin cross-site request forgery vulnerability 8.8 High -
jenkinsRed Hat Jenkins Config File Provider Plugin improper credential masking vulnerability 7.5 High -
jenkinsRed Hat Jenkins Folders Plugin information disclosure vulnerability 4.3 Medium -
jenkinsRed Hat Jenkins Folders Plugin cross-site request forgery vulnerability 4.3 Medium -
jenkinsRed Hat Jenkins Folders Plugin cross-site request forgery vulnerability 8.8 High -
jenkinsRed Hat Jenkins OpenShift Login Plugin vulnerable to Open Redirect 6.1 Medium -
jenkinsRed Hat Jenkins OpenShift Login Plugin session fixation vulnerability 8.8 High -
jenkinsRed Hat MadeYouReset HTTP/2 vulnerability 7.7 High -
jenkinsRed Hat Jetty connection leaking on idle timeout when TCP congested 7.5 High -
jenkinsRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jenkinsRed Hat Jetty accepts "+" prefixed value in Content-Length 5.3 Medium -
jenkinsRed Hat Use of temporary directory for file creation in `FileBackedOutputStream` in Guava 5.5 Medium -
jenkinsRed Hat An issue was discovered jackson-databind thru 2.15.2 allows attackers to cause a denial of... 4.7 Medium -
jenkinsRed Hat Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability 8.8 High -
jenkinsRed Hat Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability 4.3 Medium -
jenkinsRed Hat Jenkins Email Extension Plugin missing permission check 4.3 Medium -
jenkinsRed Hat Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting 5.4 Medium -
jenkinsRed Hat Spring Security logout not clearing security context 6.3 Medium -
jenkinsRed Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
jenkinsRed Hat OutOfMemoryError for large multipart without filename in Eclipse Jetty 5.3 Medium -
jenkinsRed Hat Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch 7.5 High -
jenkinsRed Hat Spring Framework vulnerable to denial of service via specially crafted SpEL expression 6.5 Medium -
jenkinsRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
jenkinsRed Hat Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray 5.9 Medium - Show olderLoading…