Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3rqh-hch3-jhpc
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL 10 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-463r-5m89-4xfr
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL 10 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-92m7-4fpw-2wxm
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container" 10 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-93qh-vwrm-c5pw
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins: Stored XSS vulnerability in node offline cause description 10 Jun
  • Fix available
  • Severity - 8.0 (High)
GHSA-g28p-6mcc-v4rv
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins exposes other users' timezone and view names to users with Overall/Read permission 10 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-g2xq-2v27-4rh3
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation 10 Jun
  • Fix available
  • Severity - 8.8 (High)
GHSA-m6wv-wh8g-64xc
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations 10 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-mw82-xcg6-gx79
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins: Missing permission check allows unauthorized cancellation of queue items 10 Jun
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-phhv-63fh-rrc8
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation 18 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-r6qv-frpc-q66c
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a link following vulnerability allows arbitrary file creation 18 Mar
  • Fix available
  • Severity - 8.8 (High)
GHSA-85h6-5m3v-gx37
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a stored XSS vulnerability in node offline cause description 18 Feb
  • Fix available
  • Severity - 8.0 (High)
GHSA-wfhp-qgm8-5p5c
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a build information disclosure vulnerability through Run Parameter 18 Feb
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-6837-qgrc-x5p6
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a CSRF vulnerability on the login form 10 Dec 2025
  • Fix available
  • Severity - 3.5 (Low)
GHSA-9p56-p6mw-w8qc
  • Maven/org.jenkins-ci.main:cli
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins has a Denial of service vulnerability in HTTP-based CLI 10 Dec 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-fxj7-6v9w-xc76
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins's build authorization token is stored and displayed in plain text 10 Dec 2025
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-hxjg-2jvf-h3rx
  • Maven/org.jenkins-ci.main:jenkins-core
 Jenkins's build authorization token is stored and displayed in plain text 10 Dec 2025
  • Fix available
  • Severity - 4.3 (Medium)
Load more...