TI-2022-01345 CVE-2022-1471 · GHSA-mjmj-j48q-9wg2
Remote Code execution in SnakeYAML
Priority CRITICAL 88
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization.
RHSA-2023:0697
OpenShift Container Platform 4.10.52 security update
Released 2023-02-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.10 jenkins-2-plugins-4.10.1675407676-1.el8, jenkins-2.361.1.1675406172-1.el8
Fixes 2 records
TI-2022-15089 CVE-2022-34174 · GHSA-9grj-j43m-mjqr
Observable discrepancy in Jenkins
Priority LOW 36
In Jenkins 2.355 and earlier, LTS 2.332.3 and earlier, an observable timing discrepancy on the login form allows distinguishing between login attempts with an invalid username, and login attempts with a valid username an…