Skip to contentJenkins Project Jenkins vulnerabilities
- jenkins filesystem list parameter, jenkins project filesystem list parameter plugin +1 moreJenkins Filesystem List Parameter Plugin has Path Traversal vulnerabilityCVE-2024-54004Fix available4.3 Medium
- jenkins simple queue, jenkins project simple queue plugin +1 moreJenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerabilityCVE-2024-54003Fix availableEPSS 81.2%8.0 High
- jenkins shared library version override, jenkins project shared library version override plugin +1 moreScript security bypass vulnerability in Jenkins Shared Library Version Override PluginCVE-2024-52554Fix available8.8 High
- jenkins openid, openid connect authentication, jenkins project openid connect authentication plugin +2 moreSession fixation vulnerability in Jenkins OpenId Connect Authentication PluginCVE-2024-52553Fix available8.8 High
- jenkins authorize project, jenkins project authorize project plugin +1 moreStored XSS vulnerability in Jenkins Authorize Project PluginCVE-2024-52552Fix available8.0 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 moreRestarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative PluginCVE-2024-52551Fix available8.0 High
- jenkins groovy, jenkins project pipeline: groovy plugin, jenkins pipeline\ +2 moreRebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy PluginCVE-2024-52550Public exploitFix available8.0 High
- jenkins script security, jenkins project script security plugin +1 moreMissing permission check in Jenkins Script Security PluginCVE-2024-52549Fix available4.3 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin lacks issuer claim validationCVE-2024-47807Fix available8.1 High
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreJenkins OpenId Connect Authentication Plugin lacks audience claim validationCVE-2024-47806Fix available8.1 High
- jenkins credentials, jenkins project credentials plugin +1 moreJenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permissionCVE-2024-47805Fix available7.5 High
- jenkinsJenkins item creation restriction bypass vulnerabilityCVE-2024-47804Fix available4.3 Medium
- jenkinsJenkins exposes multi-line secrets through error messagesCVE-2024-47803Fix available4.3 Medium
- jenkinsJenkins does not perform a permission check in an HTTP endpointCVE-2024-43045Fix available6.3 Medium
- jenkinsJenkins Remoting library arbitrary file read vulnerabilityCVE-2024-43044Public exploitFix availableEPSS 28.8%8.8 High
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreBitbucket OAuth access token exposed in the build log by Bitbucket Branch Source PluginCVE-2024-39460Fix available4.3 Medium
- jenkins plain credentials, jenkins project plain credentials plugin +1 moreSecret file credentials stored unencrypted in rare cases by Plain Credentials PluginCVE-2024-39459Fix available4.3 Medium
- jenkins structs, jenkins project structs plugin +1 moreExposure of secrets through system log in Jenkins Structs PluginCVE-2024-39458Fix available3.1 Low
- jenkins report info, jenkins project report info plugin +1 moreJenkins Report Info Plugin Path Traversal vulnerabilityCVE-2024-52734.3 Medium
- jenkins, jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +2 moreJenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721CVE-2024-341486.8 Medium
- jenkins telegram bot, jenkins project telegram bot plugin, jenkins jenkins-telegram-bot +2 moreJenkins Telegram Bot Plugin stores the Telegram Bot token in plaintextCVE-2024-341474.3 Medium
- jenkins git server, jenkins project git server plugin +1 moreJenkins Git server Plugin does not perform a permission checkCVE-2024-34146Fix available6.5 Medium
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin sandbox bypass vulnerabilityCVE-2024-34145Fix available8.8 High
- jenkins script security, jenkins project script security plugin +1 moreJenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodiesCVE-2024-34144Public exploitFix availableEPSS 48.4%9.8 Critical
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin has improper SSL/TLS certificate validationCVE-2024-28162Fix available4.2 Medium
- jenkins delphix, jenkins project delphix plugin +1 moreJenkins Delphix Plugin has SSL/TLS certificate validation disabled by defaultCVE-2024-28161Fix available5.3 Medium
- jenkins icescrum, jenkins project icescrum plugin +1 moreJenkins iceScrum Plugin vulnerable to stored Cross-site ScriptingCVE-2024-281608.8 High
- jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +1 moreJenkins Subversion Partial Release Manager Plugin missing permission checkCVE-2024-281594.3 Medium
- jenkins subversion partial release manager, jenkins project subversion partial release manager plugin +1 moreJenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request ForgeryCVE-2024-281584.3 Medium
- jenkins gitbucket, jenkins project gitbucket plugin +1 moreJenkins GitBucket Plugin vulnerable to stored Cross-site ScriptingCVE-2024-28157Public exploit8.0 High
- jenkins build monitor view, jenkins project build monitor view plugin +1 moreJenkins Build Monitor View Plugin vulnerable to stored Cross-site ScriptingCVE-2024-28156EPSS 79.2%5.4 Medium
- jenkins appspider, jenkins project appspider plugin +1 moreJenkins AppSpider Plugin missing permission checksCVE-2024-28155Fix available4.3 Medium
- jenkins mq notifier, jenkins project mq notifier plugin +1 moreJenkins MQ Notifier Plugin exposes sensitive information in build logsCVE-2024-28154Fix available6.5 Medium
- jenkins owasp dependency-check, jenkins project owasp dependency-check plugin +1 moreJenkins OWASP Dependency-Check Plugin has stored XSS vulnerabilityCVE-2024-28153Fix available5.4 Medium
- jenkins bitbucket branch source, jenkins project bitbucket branch source plugin +1 moreJenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requestsCVE-2024-28152Fix available6.3 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin Path traversal vulnerabilityCVE-2024-28151Fix available4.3 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin Stored XSS vulnerabilityCVE-2024-28150Fix available4.7 Medium
- jenkins html publisher, jenkins project html publisher plugin +1 moreJenkins HTML Publisher Plugin does not properly sanitize inputCVE-2024-28149Fix available6.5 Medium
- jenkins docker, docker-build-step, jenkins project docker-build-step plugin +2 moreJenkins docker-build-step Plugin missing permission checkCVE-2024-22168.8 High
- jenkins docker-build-step, jenkins project docker-build-step plugin +1 moreJenkins docker-build-step Plugin Cross-Site Request Forgery vulnerabilityCVE-2024-22156.1 Medium
- jenkins red hat dependency analytics, jenkins project red hat dependency analytics plugin +1 moreContent-Security-Policy disabled by Red Hat Dependency Analytics Jenkins PluginCVE-2024-23905Fix available5.4 Medium
- jenkins log command, jenkins project log command plugin +1 moreArbitrary file read vulnerability in Jenkins Log Command PluginCVE-2024-239047.5 High
- jenkins project gitlab branch source plugin, jenkins github branch source +1 moreNon-constant time webhook token comparison in Jenkins GitLab Branch Source PluginCVE-2024-23903Fix available5.3 Medium
- jenkins project gitlab branch source plugin, jenkins github branch source +1 moreCSRF vulnerability in Jenkins GitLab Branch Source PluginCVE-2024-23902Fix available4.3 Medium
- jenkins project gitlab branch source plugin, jenkins github branch source +1 moreShared projects are unconditionally discovered by Jenkins GitLab Branch Source PluginCVE-2024-23901Fix available6.5 Medium
- jenkins matrix project, jenkins project matrix project plugin +1 morePath traversal vulnerability in Jenkins Matrix Project PluginCVE-2024-23900Fix available4.3 Medium
- jenkins git server, jenkins project git server plugin +1 moreArbitrary file read vulnerability in Git server Plugin can lead to RCECVE-2024-23899Fix available6.5 Medium
- jenkinsCross-site WebSocket hijacking vulnerability in the Jenkins CLICVE-2024-23898Public exploitFix availableEPSS 67.2%8.8 High
- jenkins, jenkins command line interface (cli) +1 moreArbitrary file read vulnerability through the Jenkins CLI can lead to RCECVE-2024-23897In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- jenkins paaslane estimate, jenkins project paaslane estimate plugin +1 moreMissing permission check in Jenkins PaaSLane Estimate PluginCVE-2023-507794.3 Medium
- Show moreLoading…