Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 49
Reset filtersStored XSS vulnerability in Jenkins Git Plugin
Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin
Improper Neutralization of Input During Web Page Generation in Jenkins Git Plugin
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
Jenkins Gitlab Authentication Plugin Open Redirect vulnerability
Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation
Jenkins GitHub Authentication Plugin Cross-Site Request Forgery vulnerability
Jenkins GitLab Plugin Cross-Site Request Forgery vulnerability
Jenkins GitLab Plugin missing permission checks
Missing permission check in Jenkins GitLab Plugin
Path traversal in Jenkins REPO Plugin
Path traversal in Jenkins Git Mercurial and Repo Plugins
Cross-Site Request Forgery in Jenkins Git Plugin
Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
Insecure temporary file usage in Jenkins Git Client Plugin
Server-Side Request Forgery in Jenkins Git Plugin
Jenkins GitHub Branch Source Plugin vulnerable to Server-Side Request Forgery
Cross-Site Request Forgery in Jenkins Git Plugin
Incorrect Authorization in Jenkins Git Plugin
GitHub Authentication Plugin showed plain text client secret in configuration form
GitHub Authentication Plugin session fixation vulnerability
Client Secret stored in plain text by Jenkins GitLab Authentication Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.