Filter
AND
AND
Versions
maven/org.jenkins-ci.main:jenkins-corePath Traversal
9.1
First published (updated )
maven/org.jenkins-ci.main:jenkins-coreJenkins Command Line Interface (CLI) Path Traversal Vulnerability
First published (updated )
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents o…
9.1
First published (updated )
Jenkins JenkinsFilePath#listFiles lists files outside directories with agent read access when following symbolic li…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the lib…
9.8
First published (updated )
Jenkins JenkinsFilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*Di…
9.8
First published (updated )
Jenkins JenkinsCreating symbolic links is possible without the symlink permission.
9.8
First published (updated )
Jenkins JenkinsFilePath#unzip and FilePath#untar were not subject to any access control.
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsFilePath#reading(FileVisitor) does not reject any operations, allowing users to have unrestricted re…
First published (updated )
Jenkins JenkinsFilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link. …
9.1
First published (updated )
Jenkins JenkinsFilePath#mkdirs does not check permission to create parent directories.
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.jenkins-ci.main:jenkins-coreWhen creating temporary files, permission to create files is only checked after they’ve been created…
9.8
First published (updated )
Jenkins JenkinsJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
First published (updated )
Jenkins JenkinsJenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthentic…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsThe remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute …
9.8
First published (updated )
redhat/JenkinsThe remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execut…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.