Skip to contentJenkins vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins pipeline utility steps, jenkins project pipeline utility steps plugin +1 moreJenkins Pipeline Utility Steps Plugin arbitrary file write vulnerabilityCVE-2023-32981Fix available8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32980Fix available4.3 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin missing permission checkCVE-2023-32979Fix available4.3 Medium
- jenkins project ldap plugin, jenkins lightweight directory access protocol +1 moreJenkins LDAP Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-32978Fix available4.3 Medium
- jenkins project pipeline: job plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Job Plugin vulnerable to stored Cross-site ScriptingCVE-2023-32977Fix available5.4 Medium
- jenkins turboscript, jenkins project turboscript plugin +1 moreLack of authentication mechanism in Jenkins TurboScript Plugin webhookCVE-2023-305326.5 Medium
- jenkins consul kv builder, jenkins project consul kv builder plugin +1 moreJenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencryptedCVE-2023-305316.5 Medium
- jenkins consul kv builder, jenkins project consul kv builder plugin +1 moreJenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencryptedCVE-2023-305304.3 Medium
- jenkins lucene-search, jenkins project lucene-search plugin +1 moreJenkins Lucene-Search Plugin vulnerable to Cross-Site Request ForgeryCVE-2023-30529Fix available4.3 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration formCVE-2023-305286.5 Medium
- jenkins wso2 oauth, jenkins project wso2 oauth plugin +1 moreJenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controllerCVE-2023-305274.3 Medium
- jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin missing permissions checkCVE-2023-305266.5 Medium
- jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-305258.8 High
- jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin configuration form does not mask tokensCVE-2023-305244.3 Medium
- jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controllerCVE-2023-305234.3 Medium
- jenkins fogbugz, jenkins project fogbugz plugin +1 moreJenkins Fogbugz Plugin has missing permissions checkCVE-2023-305224.3 Medium
- jenkins assembla merge request builder, jenkins project assembla merge request builder plugin +1 moreJenkins Assembla merge request builder Plugin missing authentication to access endpointCVE-2023-305215.3 Medium
- jenkins quay.io trigger, jenkins project quay.io trigger plugin +1 moreJenkins Quay.io trigger Plugin Cross-site Scripting vulnerabilityCVE-2023-305205.4 Medium
- jenkins quay.io trigger, jenkins project quay.io trigger plugin +1 moreJenkins Quay.io trigger Plugin webhook endpoint can be accessed without authenticationCVE-2023-305195.3 Medium
- jenkins thycotic secret server, jenkins project thycotic secret server plugin +1 moreJenkins Thycotic Secret Server Plugin missing permissions checkCVE-2023-305184.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validationCVE-2023-305175.3 Medium
- jenkins image tag parameter, jenkins project image tag parameter plugin +1 moreJenkins Image Tag Parameter Plugin improperly introduces option to opt out of SSL/TLS certificate validationCVE-2023-305166.5 Medium
- jenkins thycotic devops secrets vault, jenkins project thycotic devops secrets vault plugin +1 moreJenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentialsCVE-2023-305157.5 High
- jenkins azure key vault, jenkins project azure key vault plugin +1 moreJenkins Azure Key Vault Plugin does not properly mask credentialsCVE-2023-30514Fix available7.5 High
- jenkins kubernetes, jenkins project kubernetes plugin +1 moreJenkins Kubernetes Plugin does not properly mask credentialsCVE-2023-30513Fix available7.5 High
- jenkins remote-jobs-view, jenkins project remote-jobs-view-plugin plugin +1 moreJenkins remote-jobs-view-plugin vulnerable to XML external entity attacksCVE-2023-286846.5 Medium
- jenkins phabricator differential, jenkins project phabricator differential plugin +1 moreJenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacksCVE-2023-286838.2 High
- jenkins performance publisher, jenkins project performance publisher plugin +1 moreJenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacksCVE-2023-286828.2 High
- jenkins visual studio code metrics, jenkins project visual studio code metrics plugin +1 moreJenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacksCVE-2023-286818.2 High
- jenkins crap4j, jenkins project crap4j plugin +1 moreJenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacksCVE-2023-286807.5 High
- jenkins mashup portlets, jenkins project mashup portlets plugin +1 moreJenkins Mashup Portlets Plugin vulnerable to stored cross-site scriptingCVE-2023-286795.4 Medium
- jenkins cppcheck, jenkins project cppcheck plugin +1 moreJenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)CVE-2023-286785.4 Medium
- jenkins convert to pipeline, jenkins project convert to pipeline plugin +1 moreJenkins Convert To Pipeline Plugin vulnerable to command injectionCVE-2023-286779.8 Critical
- jenkins convert to pipeline, jenkins project convert to pipeline plugin +1 moreJenkins Convert To Pipeline Plugin vulnerable to cross-site request forgeryCVE-2023-286768.8 High
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connectionsCVE-2023-28675Fix available4.3 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request ForgeryCVE-2023-28674Fix available8.8 High
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumerationCVE-2023-28673Fix available4.3 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to credential captureCVE-2023-28672Fix available6.5 Medium
- jenkins octoperf load testing, jenkins project octoperf load testing plugin plugin +1 moreJenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request ForgeryCVE-2023-28671Fix available4.3 Medium
- jenkins pipeline aggregator view, jenkins project pipeline aggregator view plugin +1 moreJenkins Pipeline Aggregator View Plugin vulnerable to Cross-site ScriptingCVE-2023-28670Fix available5.4 Medium
- jenkins jacoco, jenkins project jacoco plugin +1 moreJenkins JaCoCo Plugin vulnerable to Stored Cross-site ScriptingCVE-2023-28669Fix available5.4 Medium
- jenkins role-based authorization strategy, jenkins project role-based authorization strategy plugin +1 moreJenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabledCVE-2023-28668Fix available9.8 Critical
- jenkins project absint a³ plugin, jenkins absint a3 +1 moreJenkins AbsInt a³ Plugin XML External Entity Reference vulnerabilityCVE-2023-286857.1 High
- jenkins update-center2Cross site scripting vulnerability in update-center2CVE-2023-27905Fix available9.6 Critical
- jenkinsInformation disclosure through error stack traces related to agentsCVE-2023-27904Fix available5.3 Medium
- jenkinsIncorrect Authorization in Jenkins CoreCVE-2023-27903Fix available4.4 Medium
- jenkinsIncorrect Permission Preservation in Jenkins CoreCVE-2023-27902Fix available4.3 Medium
- jenkinsDenial of service in Jenkins CoreCVE-2023-27901Fix available7.5 High
- jenkinsDenial of service in Jenkins CoreCVE-2023-27900Fix available7.5 High
- jenkinsIncorrect Authorization in Jenkins CoreCVE-2023-27899Fix available7.0 High
- Show moreLoading…