Jenkins Project vulnerabilities

Products

• Openid Connect Authentication Plugin 2
• Openshift Login Plugin 2

Newest

• jenkins simple queue, jenkins project simple queue plugin +1 more Jenkins Simple Queue Plugin has stored cross-site scripting (XSS) vulnerability CVE-2024-54003 Fix available EPSS 81.2% 8.0 HighNovember 27, 2024
• jenkins authorize project, jenkins project authorize project plugin +1 more Stored XSS vulnerability in Jenkins Authorize Project Plugin CVE-2024-52552 Fix available 8.0 HighNovember 13, 2024
• jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 more Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin CVE-2024-52551 Fix available 8.0 HighNovember 13, 2024
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation CVE-2024-47807 Fix available 8.1 HighOctober 2, 2024
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Jenkins OpenId Connect Authentication Plugin lacks audience claim validation CVE-2024-47806 Fix available 8.1 HighOctober 2, 2024
• jenkins gitbucket, jenkins project gitbucket plugin +1 more Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting CVE-2024-28157 Public exploit 8.0 HighMarch 6, 2024
• jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin, jenkins google compute engine +2 more +4 more Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability CVE-2023-49673 Fix available 8.8 HighNovember 29, 2023
• jenkins config file provider, jenkins project config file provider plugin +1 more Jenkins Config File Provider Plugin improper credential masking vulnerability CVE-2023-40339 Fix available 7.5 HighAugust 16, 2023
• jenkins openshift login, jenkins project openshift login plugin +1 more Jenkins OpenShift Login Plugin vulnerable to Open Redirect CVE-2023-37947 Fix available 6.1 MediumJuly 12, 2023
• jenkins openshift login, jenkins project openshift login plugin +1 more Jenkins OpenShift Login Plugin session fixation vulnerability CVE-2023-37946 Fix available 8.8 HighJuly 12, 2023