CVE-2022-32149

Denial of service via crafted Accept-Language header in golang.org/x/text/language

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Golang Redhat

Products

Text Acm Container Native Virtualization and 7 more

CVE-2024-21626

runc container breakout through process.cwd trickery and leaked fds

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue.

CVSS 3.1 · 8.6 High EPSS 18.9% KEV · Not listed

Vendors

Fedoraproject Linuxfoundation Redhat

Products

Fedora Runc Enterprise Linux and 7 more

CVE-2022-43410

jenkins-plugin/mercurial: Webhook endpoint discloses job names to unauthorized users in Mercurial Plugin

Jenkins Mercurial Plugin 1251.va_b_121f184902 and earlier provides information about which jobs were triggered or scheduled for polling through its webhook endpoint, including jobs the user has no permission to access.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Mercurial Ocp Tools

CVE-2022-43409

jenkins-plugin/workflow-support: Stored XSS vulnerability in Pipeline: Supporting APIs Plugin

Jenkins Pipeline: Supporting APIs Plugin 838.va_3a_087b_4055b and earlier does not sanitize or properly encode URLs of hyperlinks sending POST requests in build logs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create Pipelines.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Pipeline\ Ocp Tools Openshift

CVE-2022-43408

jenkins-plugin/pipeline-stage-view: CSRF protection for any URL can be bypassed in Pipeline: Stage View Plugin

Jenkins Pipeline: Stage View Plugin 2.26 and earlier does not correctly encode the ID of 'input' steps when using it to generate URLs to proceed or abort Pipeline builds, allowing attackers able to configure Pipelines to specify 'input' step IDs resulting in URLs that would bypass the CSRF protection of any target URL in Jenkins.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Pipeline\ Ocp Tools Openshift

CVE-2022-43407

jenkins-plugin/pipeline-input-step: CSRF protection for any URL can be bypassed in Pipeline: Input Step Plugin

Jenkins Pipeline: Input Step Plugin 451.vf1a_a_4f405289 and earlier does not restrict or sanitize the optionally specified ID of the 'input' step, which is used for the URLs that process user interactions for the given 'input' step (proceed or abort) and is not correctly encoded, allowing attackers able to configure Pipelines to have Jenkins build URLs from 'input' step IDs that would bypass the CSRF protection of any target URL in Jenkins when the 'input' step is interacted with.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Pipeline\ Ocp Tools Openshift

CVE-2024-28149

jenkins-2-plugins: Improper input sanitization in HTML Publisher Plugin

Jenkins HTML Publisher Plugin 1.16 through 1.32 (both inclusive) does not properly sanitize input, allowing attackers with Item/Configure permission to implement cross-site scripting (XSS) attacks and to determine whether a path on the Jenkins controller file system exists.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Html Publisher Ocp Tools

CVE-2022-41723

Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed

Vendors

Golang Redhat

Products

Go Hpack Http2 and 19 more

CVE-2022-45693

jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Debian Jettison Project Redhat

Products

Debian Linux Jettison Camel Spring Boot and 7 more

CVE-2022-40149

Stack Buffer Overflow in Jettison

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Jettison Project Redhat

Products

Debian Linux Jettison Amq Streams and 8 more

CVE-2022-40150

Stack Buffer Overflow in Jettison

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Jettison Project Redhat

Products

Debian Linux Jettison Amq Streams and 8 more

CVE-2021-38561

golang: out-of-bounds read in golang.org/x/text/language leads to DoS

golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Golang Redhat

Products

Text Acm Container Native Virtualization and 3 more

CVE-2023-24422

jenkins-2-plugins/script-security: Sandbox bypass vulnerability in Script Security Plugin

A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Script Security Ocp Tools Openshift

CVE-2023-25762

jenkins-2-plugins/pipeline-build-step: Stored XSS vulnerability in Pipeline: Build Step Plugin

Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.

CVSS 3.1 · 5.4 Medium EPSS 82.1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Pipeline\ Ocp Tools Openshift

CVE-2024-47803

jenkins: Exposure of multi-line secrets through error messages

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Ocp Tools

CVE-2023-25761

jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin

Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Junit Ocp Tools Openshift

CVE-2024-43044

jenkins: Arbitrary file read vulnerability through agent connections can lead to RCE

Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.

CVSS 3.1 · 8.8 High EPSS 28.8% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Ocp Tools

CVE-2024-47804

jenkins: Item creation restriction bypass vulnerability

If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and earlier, LTS 2.462.2 and earlier creates the item in memory, only deleting it from disk, allowing attackers with Item/Configure permission to save the item to persist it, effectively bypassing the item creation restriction.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Ocp Tools

CVE-2023-27904

Jenkins: Information disclosure through error stack traces related to agents

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Ocp Tools Openshift

CVE-2023-27903

Jenkins: Temporary file parameter created with insecure permissions

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Redhat

Products

Jenkins Ocp Tools Openshift