jenkins-2-plugins vulnerabilities (Red Hat)
304 vulnerabilities.
jenkins-2-pluginsRed HatStack exhaustion in json-smart leads to denial of service when parsing malformed JSON7.5 Highjenkins-2-pluginsRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Highjenkins-2-pluginsRed HatInformation disclosure through error stack traces related to agents5.3 Mediumjenkins-2-pluginsRed HatIncorrect Authorization in Jenkins Core4.4 Mediumjenkins-2-pluginsRed HatIncorrect Permission Preservation in Jenkins Core4.3 Mediumjenkins-2-pluginsRed HatDenial of service in Jenkins Core7.5 Highjenkins-2-pluginsRed HatDenial of service in Jenkins Core7.5 Highjenkins-2-pluginsRed HatIncorrect Authorization in Jenkins Core7.0 Highjenkins-2-pluginsRed HatCross-site Scripting vulnerability in Jenkins9.6 Criticaljenkins-2-pluginsRed HatApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highjenkins-2-pluginsRed HatCross-site Scripting in Jenkins Pipeline: Build Step Plugin5.4 Mediumjenkins-2-pluginsRed HatCross-site Scripting in Jenkins JUnit Plugin5.4 Mediumjenkins-2-pluginsRed HatHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...9.1 Criticaljenkins-2-pluginsRed HatSandbox bypass in Jenkins Script Security Plugin8.8 Highjenkins-2-pluginsRed HatXStream Denial of Service via stack overflow8.2 Highjenkins-2-pluginsRed HatJettison Out-of-bounds Write vulnerability7.5 Highjenkins-2-pluginsRed HatRemote Code execution in SnakeYAML8.3 Highjenkins-2-pluginsRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaljenkins-2-pluginsRed HatArbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin8.1 Highjenkins-2-pluginsRed HatJenkins JUnit Plugin subject to Cross-site Scripting via URL conversion5.4 Mediumjenkins-2-pluginsRed HatWhole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions7.5 Highjenkins-2-pluginsRed HatSpring Security authorization rules can be bypassed via forward or include dispatcher types9.8 Criticaljenkins-2-pluginsRed Hatspring-security-oauth2-client vulnerable to Privilege Escalation8.1 Highjenkins-2-pluginsRed HatWebhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin5.3 Mediumjenkins-2-pluginsRed HatStored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin5.4 Mediumjenkins-2-pluginsRed HatJenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins6.5 Mediumjenkins-2-pluginsRed HatCSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin8.8 Highjenkins-2-pluginsRed HatSandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin9.9 Criticaljenkins-2-pluginsRed HatSandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin and Pipeline: Deprecated Groovy Libraries Plugin9.9 Criticaljenkins-2-pluginsRed HatSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Criticaljenkins-2-pluginsRed HatJenkins Script Security Plugin sandbox bypass vulnerability9.9 Criticaljenkins-2-pluginsRed HatJenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution9.9 Criticaljenkins-2-pluginsRed HatSandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin9.9 Criticaljenkins-2-pluginsRed HatKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Mediumjenkins-2-pluginsRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaljenkins-2-pluginsRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Highjenkins-2-pluginsRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Highjenkins-2-pluginsRed HatStack Buffer Overflow in Woodstox6.5 Mediumjenkins-2-pluginsRed HatStack Buffer Overflow in xstream6.5 Mediumjenkins-2-pluginsRed HatStack Buffer Overflow in Jettison6.5 Mediumjenkins-2-pluginsRed HatStack Buffer Overflow in Jettison6.5 Mediumjenkins-2-pluginsRed HatDenial of Service (DoS)7.5 Highjenkins-2-pluginsRed HatJenkins GitHub plugin uses weak webhook signature function5.3 Mediumjenkins-2-pluginsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook5.3 Mediumjenkins-2-pluginsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook7.5 Highjenkins-2-pluginsRed HatLack of authentication mechanism in Jenkins Git Plugin webhook8.8 Highjenkins-2-pluginsRed HatJenkins Git client plugin 3.11.0 does not perform SSH host key verification8.1 Highjenkins-2-pluginsRed HatStack exhaustion due to deeply nested types in go/parser5.5 Mediumjenkins-2-pluginsRed Hatfabric8 kubernetes-client vulnerable6.7 Mediumjenkins-2-pluginsRed HatJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service7.5 High- Show moreLoading…