Jan 24, 2024 · This advisory announces vulnerabilities in the following Jenkins deliverables: Jenkins (core); Git server Plugin · GitLab Branch Source ...
Security advisories are the primary way to publicly inform Jenkins users about security issues in Jenkins and Jenkins plugins. You can find all past security ...
2018 · Jenkins Security Advisory 2018-12-05. Affects Jenkins Core · Jenkins Security Advisory 2018-10-29 · Jenkins Security Advisory 2018-10-10 · Jenkins ...
Implementation. The CSP header sent by Jenkins can be modified by setting the Java system property hudson.model.DirectoryBrowserSupport.CSP : If its value is ...
The "Security" section of the web UI allows a Jenkins administrator to enable, configure, or disable key security features which apply to the entire Jenkins ...
May 16, 2023 · This vulnerability allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials. LDAP Plugin 676.
Mar 8, 2023 · This vulnerability only affects operating systems using a shared temporary directory for all users (typically Linux). Additionally, the default ...
Jul 12, 2023 · This vulnerability allows attackers to have Jenkins connect to an attacker-specified URL, capturing a newly generated JCLI token that allows ...
6 days ago · Allows Jenkins administrators to control what in-process scripts can be run by less-privileged users.
This page lists all security issues that have been published in security advisories since ca. 2018. SECURITY-3386 · SECURITY-3379 · SECURITY-3344 ...