jenkins vulnerabilities (Red Hat)
371 vulnerabilities.
jenkinsRed HatArbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin7.5 HighjenkinsRed HatCross-site Scripting in Jenkins JUnit Plugin5.4 MediumjenkinsRed HatCommandline class shell injection vulnerabilities9.8 CriticaljenkinsRed HatInteger overflow in BCrypt class in Spring Security5.3 MediumjenkinsRed HatAuthorization bypass in Spring Security9.8 CriticaljenkinsRed HatMissing permission check in Jenkins Blue Ocean Plugin6.5 MediumjenkinsRed HatCross Site Request Forgery in Jenkins Blue Ocean Plugin6.5 MediumjenkinsRed HatPath traversal in Jenkins Mercurial Plugin7.5 HighjenkinsRed HatCSRF vulnerability in Jenkins Script Security Plugin4.3 MediumjenkinsRed HatSandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin8.5 HighjenkinsRed HatInsufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin6.5 MediumjenkinsRed HatDeserialization of Untrusted Data7.7 HighjenkinsRed HatUntrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin5.3 MediumjenkinsRed HatPassword parameter default values exposed by Jenkins Pipeline: Build Step Plugin6.5 MediumjenkinsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighjenkinsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighjenkinsRed HatJenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure8.8 HighjenkinsRed HatJenkins Pipeline: Groovy Plugin has Insufficiently Protected Credentials4.3 MediumjenkinsRed HatImproper Limitation of a Pathname to a Restricted Directory in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 MediumjenkinsRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Shared Groovy Libraries Plugin6.5 MediumjenkinsRed HatImproper Link Resolution Before File Access in Jenkins Pipeline: Groovy Plugin6.5 MediumjenkinsRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Shared Groovy Libraries Plugin8.8 HighjenkinsRed HatImproper Neutralization of Special Elements used in an OS Command in Jenkins Pipeline: Groovy Plugin8.8 HighjenkinsRed HatLink Following in Jenkins Pipeline Multibranch Plugin6.5 MediumjenkinsRed HatJenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection8.8 HighjenkinsRed HatIncorrect Permission Assignment for Critical Resource in CRI-O4.2 MediumjenkinsRed HatDenial of Service by injecting highly recursive collections or maps in XStream7.5 HighjenkinsRed HatOS command execution vulnerability in Jenkins Docker Commons Plugin8.8 HighjenkinsRed HatCross-Site Request Forgery in Jenkins4.3 MediumjenkinsRed HatGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 MediumjenkinsRed Hatgolang.org/x/net/http2 allows uncontrolled memory consumption7.5 HighjenkinsRed HatSMTPS server hostname not checked when making TLS connection to SMTPS server7.4 HighjenkinsRed HatClarify Content-Type handling in OCI spec3.0 LowjenkinsRed Hatcoreos-installer < 0.10.0 writes world-readable Ignition config to installed system5.5 MediumjenkinsRed HatGo before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted...7.5 HighjenkinsRed HatPath traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files7.5 HighjenkinsRed HatAgent-to-controller access control allows reading/writing most content of build directories in Jenkins9.1 CriticaljenkinsRed HatAgent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin9.8 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.8 HighjenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins7.5 HighjenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins8.1 HighjenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.1 CriticaljenkinsRed HatMultiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins9.8 CriticaljenkinsRed Hatcoreos-installer improperly verifies GPG signature when decompressing gzipped artifact7.8 High- Show moreLoading…