jenkins-2-plugins vulnerabilities (Red Hat)
304 vulnerabilities.
jenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins7.5 Highjenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.1 Highjenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Criticaljenkins-2-pluginsRed Hatcoreos-installer improperly verifies GPG signature when decompressing gzipped artifact7.8 Highjenkins-2-pluginsRed HatStored XSS vulnerability in Jenkins Git Plugin6.1 Mediumjenkins-2-pluginsRed HatHoles in EndpointSlice Validation Enable Host Network Hijack2.7 Lowjenkins-2-pluginsRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 Mediumjenkins-2-pluginsRed HatValidating Admission Webhook does not observe some previous fields6.5 Mediumjenkins-2-pluginsRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 Highjenkins-2-pluginsRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 Mediumjenkins-2-pluginsRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 Mediumjenkins-2-pluginsRed Hatblock repositories using http by default9.1 Criticaljenkins-2-pluginsRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 Mediumjenkins-2-pluginsRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 Mediumjenkins-2-pluginsRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 Mediumjenkins-2-pluginsRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 Highjenkins-2-pluginsRed HatView name validation bypass in Jenkins4.3 Mediumjenkins-2-pluginsRed HatLack of type validation in agent related REST API in Jenkins4.3 Mediumjenkins-2-pluginsRed HatImproper Locking in github.com/containers/storage6.5 Mediumjenkins-2-pluginsRed HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 Mediumjenkins-2-pluginsRed HatImproper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client7.4 Highjenkins-2-pluginsRed HatDOS vulnerability for Quoted Quality CSV headers5.2 Mediumjenkins-2-pluginsRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 Mediumjenkins-2-pluginsRed HatStored XSS vulnerability in Jenkins on new item page5.4 Mediumjenkins-2-pluginsRed HatReflected XSS vulnerability in Jenkins markup formatter preview6.1 Mediumjenkins-2-pluginsRed HatMissing permission check for paths with specific prefix in Jenkins5.3 Mediumjenkins-2-pluginsRed HatStored XSS vulnerability in Jenkins button labels5.4 Mediumjenkins-2-pluginsRed HatExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 Mediumjenkins-2-pluginsRed HatArbitrary file existence check in file fingerprints in Jenkins4.3 Mediumjenkins-2-pluginsRed HatPath traversal vulnerability in Jenkins agent names8.0 Highjenkins-2-pluginsRed HatImproper handling of REST API XML deserialization errors in Jenkins8.0 Highjenkins-2-pluginsRed HatXSS vulnerability in Jenkins notification bar5.4 Mediumjenkins-2-pluginsRed HatArbitrary file read vulnerability in workspace browsers in Jenkins6.5 Mediumjenkins-2-pluginsRed HatImproper Input Validation in GoGo Protobuf8.6 Highjenkins-2-pluginsRed HatDocker config secrets leaked when file is malformed and loglevel >= 44.7 Mediumjenkins-2-pluginsRed HatBuffer not correctly recycled in Gzip Request inflation4.8 Mediumjenkins-2-pluginsRed HatGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 Highjenkins-2-pluginsRed HatTiming attacks in python-rsa7.5 Highjenkins-2-pluginsRed HatMissing authorization in Jenkins Kubernetes Plugin4.3 Mediumjenkins-2-pluginsRed HatMissing Authorization in Jenkins Kubernetes Plugin4.3 Mediumjenkins-2-pluginsRed HatExposure of Sensitive Information to an Unauthorized Actor in Jenkins Kubernetes Plugin4.3 Mediumjenkins-2-pluginsRed HatMissing Authorization in Jenkins Mercurial Plugin4.3 Mediumjenkins-2-pluginsRed HatXXE vulnerability in Jenkins Mercurial Plugin6.5 Mediumjenkins-2-pluginsRed HatXXE vulnerability in Jenkins Subversion Plugin6.5 Mediumjenkins-2-pluginsRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.0 High- Show moreLoading…