Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 259
Reset filtersImproper handling of equivalent directory names on Windows in Jenkins
Improper permission checks allow canceling queue items and aborting builds in Jenkins
Session fixation vulnerability in Jenkins
View name validation bypass in Jenkins
Lack of type validation in agent related REST API in Jenkins
Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins
Excessive memory allocation in graph URLs leads to denial of service in Jenkins
Stored XSS vulnerability in Jenkins on new item page
Path traversal vulnerability in Jenkins agent names
Reflected XSS vulnerability in Jenkins markup formatter preview
Missing permission check for paths with specific prefix in Jenkins
Improper handling of REST API XML deserialization errors in Jenkins
Stored XSS vulnerability in Jenkins button labels
Arbitrary file existence check in file fingerprints in Jenkins
XSS vulnerability in Jenkins notification bar
Arbitrary file read vulnerability in workspace browsers in Jenkins
Jenkins Cross-site Scripting vulnerability in project naming strategy
Improper Neutralization of Input During Web Page Generation in Jenkins
Jenkins Cross-Site Scripting vulnerability in help icons
Stored XSS vulnerability in Jenkins 'keep forever' badge icon
Stored XSS vulnerability in Jenkins upstream cause
Stored XSS vulnerability in Jenkins job build time trend
Stored XSS vulnerability in Jenkins console links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.