Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 259
Reset filtersJenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission
Jenkins exposes multi-line secrets through error messages
Jenkins item creation restriction bypass vulnerability
Jenkins does not perform a permission check in an HTTP endpoint
Jenkins Remoting library arbitrary file read vulnerability
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Jenkins temporary plugin file created with insecure permissions
Jenkins does not exclude sensitive build variables from search
Jenkins temporary uploaded file created with insecure permissions
Jenkins temporary uploaded file created with insecure permissions
Jenkins Cross-site Scripting vulnerability
Jenkins Stored Cross-site Scripting vulnerability
Jenkins CSRF protection bypass vulnerability
Cross-site Scripting vulnerability in Jenkins
Incorrect Authorization in Jenkins Core
Information disclosure through error stack traces related to agents
Incorrect Authorization in Jenkins Core
Incorrect Permission Preservation in Jenkins Core
Denial of service in Jenkins Core
Denial of service in Jenkins Core
Jenkins vulnerable to stored cross site scripting in the I:helpIcon component
Cross-site Scripting vulnerability in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.