×
AllVideosBooksNews Images Maps Shopping
Search tools

Jenkins Security Advisory 2024-03-06

www.jenkins.io › security › advisory
Mar 6, 2024 · Stored XSS vulnerability in iceScrum Plugin ... Description: iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build ...

Jenkins Security Advisory 2023-07-12

www.jenkins.io › security › advisory
Jul 12, 2023 · mabl Plugin 0.0.47 defines the appropriate context for credentials lookup. CSRF vulnerability and missing permission checks in mabl Plugin allow ...

Jenkins Security Advisory 2023-06-14

www.jenkins.io › security › advisory
Jun 14, 2023 · CSRF protection bypass vulnerability · SSL/TLS certificate validation disabled by default in Checkmarx Plugin · Missing permission checks in Team ...

Jenkins Security Advisory 2023-03-08

www.jenkins.io › security › advisory
Mar 8, 2023 · Search K. Jenkins Security Home ... Custom update site URLs (i.e., not https://updates.jenkins.io ... Additionally, the Jenkins security team has ...

Jenkins Security Advisory 2023-05-16

www.jenkins.io › security › advisory
May 16, 2023 · The Jenkins security team is not aware of any plugins that allow the exploitation of this vulnerability, as the build name must be set before ...

Jenkins Security Advisory 2023-07-26

www.jenkins.io › security › advisory
Jul 26, 2023 · As of the publication of this advisory, the Jenkins security team is not aware of other plugins with a similar issue. CSRF vulnerability in ...

Jenkins Security Advisory 2023-08-16

www.jenkins.io › security › advisory
Aug 16, 2023 · Blue Ocean Plugin 1.27.5.1 uses the configured SCM URL, instead of a user-specified URL provided as a parameter to the HTTP endpoint. CSRF ...

Jenkins Security Advisory 2023-12-13

www.jenkins.io › security › advisory
Dec 13, 2023 · Scriptler Plugin 342.v6a_89fd40f466 and earlier does not restrict a file name query parameter in an HTTP endpoint. This allows attackers with ...

Jenkins Security Advisory 2023-11-29

www.jenkins.io › security › advisory
Nov 29, 2023 · Jira Plugin 3.12 defines the appropriate context for credentials lookup. Incorrect permission checks in Google Compute Engine Plugin. SECURITY- ...

Improvements by the Security Team - Jenkins

www.jenkins.io › security › improvements
Search K. Jenkins Security Home. For Administrators ... These are some contributions by members of the Jenkins security team ... Resource Root URL: Support serving ...