Skip to content

python-oslo-serialization vulnerabilities (Red Hat)

81 vulnerabilities.

python-oslo-serialization Red Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfsCVE-2021-30465Fix availableEPSS 10.2%8.5 HighMay 19, 2021
python-oslo-serialization Red HatCross-Site Request Forgery in Jenkins Credentials PluginCVE-2021-21648Fix availableEPSS 11.3%6.1 MediumMay 11, 2021
python-oslo-serialization Red HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventletCVE-2021-21419Fix available5.3 MediumMay 7, 2021
python-oslo-serialization Red HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDsCVE-2021-21645Fix available4.3 MediumApril 21, 2021
python-oslo-serialization Red HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration filesCVE-2021-21644Fix available5.4 MediumApril 21, 2021
python-oslo-serialization Red HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDsCVE-2021-21643Fix available6.5 MediumApril 21, 2021
python-oslo-serialization Red HatXML External Entity Reference vulnerability in Jenkins Config File Provider PluginCVE-2021-21642Fix availableEPSS 37.8%8.1 HighApril 21, 2021
python-oslo-serialization Red HatDenial of service in gopkg.in/yaml.v2CVE-2021-4235Fix available5.5 MediumApril 14, 2021
python-oslo-serialization Red HatView name validation bypass in JenkinsCVE-2021-21640Fix available4.3 MediumApril 7, 2021
python-oslo-serialization Red HatLack of type validation in agent related REST API in JenkinsCVE-2021-21639Fix available4.3 MediumApril 7, 2021
python-oslo-serialization Red HatImproper Locking in github.com/containers/storageCVE-2021-20291Fix available6.5 MediumApril 1, 2021
python-oslo-serialization Red HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some itemsCVE-2021-21623Fix available6.5 MediumMarch 18, 2021
python-oslo-serialization Red HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...CVE-2021-3114Fix available6.5 MediumJanuary 26, 2021
python-oslo-serialization Red HatStored XSS vulnerability in Jenkins on new item pageCVE-2021-21611Fix available5.4 MediumJanuary 13, 2021
python-oslo-serialization Red HatReflected XSS vulnerability in Jenkins markup formatter previewCVE-2021-21610Fix available6.1 MediumJanuary 13, 2021
python-oslo-serialization Red HatMissing permission check for paths with specific prefix in JenkinsCVE-2021-21609Fix available5.3 MediumJanuary 13, 2021
python-oslo-serialization Red HatStored XSS vulnerability in Jenkins button labelsCVE-2021-21608Fix available5.4 MediumJanuary 13, 2021
python-oslo-serialization Red HatExcessive memory allocation in graph URLs leads to denial of service in JenkinsCVE-2021-21607Fix available6.5 MediumJanuary 13, 2021
python-oslo-serialization Red HatArbitrary file existence check in file fingerprints in JenkinsCVE-2021-21606Fix available4.3 MediumJanuary 13, 2021
python-oslo-serialization Red HatPath traversal vulnerability in Jenkins agent namesCVE-2021-21605Fix available8.0 HighJanuary 13, 2021
python-oslo-serialization Red HatImproper handling of REST API XML deserialization errors in JenkinsCVE-2021-21604Fix available8.0 HighJanuary 13, 2021
python-oslo-serialization Red HatXSS vulnerability in Jenkins notification barCVE-2021-21603Fix available5.4 MediumJanuary 13, 2021
python-oslo-serialization Red HatArbitrary file read vulnerability in workspace browsers in JenkinsCVE-2021-21602Fix available6.5 MediumJanuary 13, 2021
python-oslo-serialization Red HatImproper Input Validation in GoGo ProtobufCVE-2021-3121Fix available8.6 HighJanuary 11, 2021