Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2021-21690

jenkins: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21689

jenkins: FilePath#unzip and FilePath#untar were not subject to any access control

FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.

CVSS 3.1 · 9.1 Critical EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21688

jenkins: FilePath#reading(FileVisitor) does not reject any operations allowing users to have unrestricted read access

The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have unrestricted read access using certain operations (creating archives, FilePath#copyRecursiveTo).

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21687

jenkins: FilePath#untar does not check permission to create symbolic links when unarchiving a symbolic link

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.

CVSS 3.1 · 9.1 Critical EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21686

jenkins: File path filters do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories

File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories.

CVSS 3.1 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21685

jenkins: FilePath#mkdirs does not check permission to create parent directories

Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkdirs.

CVSS 3.1 · 9.1 Critical EPSS 1.6% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21684

jenkins-2-plugins/git: stored XSS vulnerability

Jenkins Git Plugin 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause, resulting in a stored cross-site scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Jenkins Redhat
Products
Git Openshift
CVE-2021-21671

jenkins: session fixation vulnerability

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21670

jenkins: improper permission checks allow canceling queue items and aborting builds

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier allows users to cancel queue items and abort builds of jobs for which they have Item/Cancel permission even when they do not have Item/Read permission.

CVSS 3.1 · 4.3 Medium EPSS 2.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21648

jenkins-2-plugins/credentials: Reflected XSS vulnerability in Credentials Plugin

Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS 11.3% KEV · Not listed
Vendors
Jenkins Redhat
Products
Credentials Openshift
CVE-2021-21645

jenkins-2-plugins/config-file-provider: Does not perform permission checks in several HTTP endpoints.

Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Config File Provider Openshift Rhmt
CVE-2021-21644

jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnerability.

A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID.

CVSS 3.1 · 5.4 Medium EPSS 1.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Config File Provider Openshift Rhmt
CVE-2021-21643

jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints.

Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Config File Provider Openshift Rhmt
CVE-2021-21642

jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks.

Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 3.1 · 8.1 High EPSS 37.8% KEV · Not listed
Vendors
Jenkins Redhat
Products
Config File Provider Openshift Rhmt
CVE-2021-21640

jenkins: view name validation bypass

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names.

CVSS 3.1 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21639

jenkins: lack of type validation in agent related REST API

Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type.

CVSS 3.1 · 4.3 Medium EPSS 2.7% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21623

jenkins-2-plugins/matrix-auth: Incorrect permission checks in Matrix Authorization Strategy Plugin

An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders.

CVSS 3.1 · 6.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Matrix Authorization Strategy Openshift
CVE-2021-21615

jenkins: Filesystem traversal by privileged users

Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21611

jenkins: Stored XSS vulnerability on new item page

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to specify display names or IDs of item types.

CVSS 3.1 · 5.4 Medium EPSS 1.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2021-21610

jenkins: Reflected XSS vulnerability in markup formatter preview

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift