jenkins-2-plugins vulnerabilities (Red Hat)
304 vulnerabilities.
jenkins-2-pluginsRed HatObservable timing discrepancy allows determining username validity in Jenkins7.5 Highjenkins-2-pluginsRed HatArbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin7.5 Highjenkins-2-pluginsRed HatCross-site Scripting in Jenkins JUnit Plugin5.4 Mediumjenkins-2-pluginsRed HatNode DOS by way of memory exhaustion through ExecSync request in CRI-O7.5 Highjenkins-2-pluginsRed HatCommandline class shell injection vulnerabilities9.8 Criticaljenkins-2-pluginsRed HatInteger overflow in BCrypt class in Spring Security5.3 Mediumjenkins-2-pluginsRed HatAuthorization bypass in Spring Security9.8 Criticaljenkins-2-pluginsRed HatMissing permission check in Jenkins Blue Ocean Plugin6.5 Mediumjenkins-2-pluginsRed HatCross Site Request Forgery in Jenkins Blue Ocean Plugin6.5 Mediumjenkins-2-pluginsRed HatPath traversal in Jenkins Mercurial Plugin7.5 Highjenkins-2-pluginsRed HatCSRF vulnerability in Jenkins Script Security Plugin4.3 Mediumjenkins-2-pluginsRed HatSandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin8.5 Highjenkins-2-pluginsRed HatInsufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin6.5 Mediumjenkins-2-pluginsRed HatDeserialization of Untrusted Data7.7 Highjenkins-2-pluginsRed HatIncorrect Default Permissions in CRI-O5.3 Mediumjenkins-2-pluginsRed HatUntrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin5.3 Mediumjenkins-2-pluginsRed HatStored Cross-site Scripting vulnerability in Jenkins Subversion Plugin5.4 Mediumjenkins-2-pluginsRed HatStored Cross-site Scripting vulnerability in Jenkins Jira Plugin5.4 Mediumjenkins-2-pluginsRed HatCross-site Scripting in Jenkins Credentials Plugin5.4 Mediumjenkins-2-pluginsRed HatCode Injection in CRI-O8.8 Highjenkins-2-pluginsRed HatA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....7.5 Highjenkins-2-pluginsRed HatPassword parameter default values exposed by Jenkins Pipeline: Build Step Plugin6.5 Mediumjenkins-2-pluginsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 Highjenkins-2-pluginsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 Highjenkins-2-pluginsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 Highjenkins-2-pluginsRed HatJenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials4.3 Mediumjenkins-2-pluginsRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 Mediumjenkins-2-pluginsRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 Mediumjenkins-2-pluginsRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin6.5 Mediumjenkins-2-pluginsRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin8.8 Highjenkins-2-pluginsRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin8.8 Highjenkins-2-pluginsRed HatLink Following in Jenkins Pipeline Multibranch Plugin6.5 Mediumjenkins-2-pluginsRed HatJenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection8.8 Highjenkins-2-pluginsRed HatUncontrolled Resource Consumption in promhttp7.5 Highjenkins-2-pluginsRed HatIncorrect Permission Assignment for Critical Resource in CRI-O4.2 Mediumjenkins-2-pluginsRed HatDenial of Service by injecting highly recursive collections or maps in XStream7.5 Highjenkins-2-pluginsRed HatOS command execution vulnerability in Jenkins Docker Commons Plugin8.8 Highjenkins-2-pluginsRed HatCross-Site Request Forgery in Jenkins4.3 Mediumjenkins-2-pluginsRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Mediumjenkins-2-pluginsRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 Highjenkins-2-pluginsRed HatSMTPS server hostname not checked when making TLS connection to SMTPS server7.4 Highjenkins-2-pluginsRed HatClarify Content-Type handling in OCI spec3.0 Lowjenkins-2-pluginsRed Hatcoreos-installer < 0.10.0 writes world-readable Ignition config to installed system5.5 Mediumjenkins-2-pluginsRed HatGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 Highjenkins-2-pluginsRed HatPath traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files7.5 Highjenkins-2-pluginsRed HatAgent-to-controller access control allows reading/writing most content of build directories in Jenkins9.1 Criticaljenkins-2-pluginsRed HatAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.8 Highjenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Criticaljenkins-2-pluginsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 Critical- Show moreLoading…