Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 112

Export CSV
CVE-2023-32981

jenkins-2-plugin: pipeline-utility-steps: Arbitrary file write vulnerability on agents in Pipeline Utility Steps Plugin

An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline Utility Steps Ocp Tools Openshift
CVE-2023-32977

jenkins-2-plugin: workflow-job: Stored XSS vulnerability in Pipeline: Job Plugin

Jenkins Pipeline: Job Plugin does not escape the display name of the build that caused an earlier build to be aborted, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to set build display names immediately.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Ocp Tools Openshift
CVE-2023-40341

jenkins-plugins: blueocean: CSRF vulnerability in Blue Ocean Plugin allows capturing credentials

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Blue Ocean Ocp Tools
CVE-2023-40339

jenkins-plugins: config-file-provider: Improper masking of credentials in Config File Provider Plugin

Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) credentials specified in configuration files when they're written to the build log.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project Redhat
Products
Config File Provider Jenkins Config File Provider Plugin Ocp Tools
CVE-2023-40338

jenkins-plugins: cloudbees-folder: Information disclosure in Folders Plugin

Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier displays an error message that includes an absolute path of a log file when attempting to access the Scan Organization Folder Log if no logs are available, exposing information about the Jenkins controller file system.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Folders Ocp Tools
CVE-2023-40337

jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy a view inside a folder.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Folders Ocp Tools
CVE-2023-40336

jenkins-plugins: cloudbees-folder: CSRF vulnerability in Folders Plugin may approve unsandboxed scripts

A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attackers to copy folders.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Folders Ocp Tools
CVE-2023-35116

jackson-databind: denial of service via cylic dependencies

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Fasterxml Redhat
Products
Jackson-databind Amq Broker Apache-camel-spring-boot and 4 more
CVE-2022-43406

jenkins-plugin/workflow-cps-global-lib: Sandbox bypass vulnerability in Pipeline: Deprecated Groovy Libraries Plugin

A sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin 583.vf3b_454e43966 and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Groovy Libraries Ocp Tools Openshift
CVE-2022-43405

jenkins-plugin/pipeline-groovy-lib: Sandbox bypass vulnerability in Pipeline: Groovy Libraries Plugin

A sandbox bypass vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 612.v84da_9c54906d and earlier allows attackers with permission to define untrusted Pipeline libraries and to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Groovy Libraries Ocp Tools Openshift
CVE-2022-43404

jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin

A sandbox bypass vulnerability involving crafted constructor bodies and calls to sandbox-generated synthetic constructors in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools Openshift
CVE-2022-43403

jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.9% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools Openshift
CVE-2022-43402

jenkins-plugin/workflow-cps: Sandbox bypass vulnerabilities in Pipeline: Groovy Plugin

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Pipeline: Groovy Plugin 2802.v5ea_628154b_c2 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Pipeline\ Ocp Tools Openshift
CVE-2022-43401

jenkins-plugin/script-security: Sandbox bypass vulnerabilities in Jenkins Script Security Plugin

A sandbox bypass vulnerability involving various casts performed implicitly by the Groovy language runtime in Jenkins Script Security Plugin 1183.v774b_0b_0a_a_451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

CVSS 3.1 · 9.9 Critical EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Script Security Ocp Tools Openshift
CVE-2022-42889

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.StringLookup that performs the interpolation. Starting with version 1.5 and continuing through 1.9, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Text 1.10.0, which disables the problematic interpolators by default.

CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Not listed
Vendors
Apache Juniper Netapp and 1 more
Products
Commons Text Jsa1500 Jsa3500 and 18 more
CVE-2022-41854

Stack Overflow in Snakeyaml

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

CVSS 3.1 · 5.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Redhat Snakeyaml Project
Products
Fedora Amq Clients Camel Spring Boot and 10 more
CVE-2022-30954

plugin: missing permission checks in Blue Ocean Plugin

Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP server.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Blue Ocean Ocp Tools Openshift
CVE-2022-30953

plugin: CSRF vulnerability in Blue Ocean Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to connect to an attacker-specified HTTP server.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Blue Ocean Ocp Tools Openshift