Filter
AND
AND
Versions
maven/org.jenkins-ci.main:jenkins-coreJenkins Command Line Interface (CLI) Path Traversal Vulnerability
First published (updated )
Jenkins JenkinsJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
First published (updated )
maven/org.jenkins-ci.main:jenkins-corePath Traversal
9.1
First published (updated )
Jenkins JenkinsThe remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute …
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/JenkinsThe remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execut…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsJenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthentic…
9.8
First published (updated )
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the lib…
9.8
First published (updated )
Jenkins JenkinsFilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*Di…
9.8
First published (updated )
Jenkins JenkinsFilePath#mkdirs does not check permission to create parent directories.
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.jenkins-ci.main:jenkins-coreWhen creating temporary files, permission to create files is only checked after they’ve been created…
9.8
First published (updated )
Jenkins JenkinsJenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents o…
9.1
First published (updated )
Jenkins JenkinsFilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link. …
9.1
First published (updated )
Jenkins JenkinsFilePath#listFiles lists files outside directories with agent read access when following symbolic li…
First published (updated )
Jenkins JenkinsFilePath#reading(FileVisitor) does not reject any operations, allowing users to have unrestricted re…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Jenkins JenkinsCreating symbolic links is possible without the symlink permission.
9.8
First published (updated )
Jenkins JenkinsFilePath#unzip and FilePath#untar were not subject to any access control.
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.