Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins — Jenkins Security Advisory 2024-01-24 Clear all filters
TI-2024-15886 CVE-2024-23898 · GHSA-53ph-2r2x-vqw8

Origin validation error in Jenkins

Priority HIGH 77

Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin validation of requests made through the CLI WebSocket endpoint, resulting in a cross-site WebSocket hijac…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67151 Published 2024-01-24 Partial fix · 2.442, 2.426.3 +1 CWE-346
TI-2024-15885 CVE-2024-23897 · GHSA-6f9g-cxwr-q5jr

Path traversal in Jenkins

Priority CRITICAL 100KEV

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthentic…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2024-01-24 Partial fix · 2.442, 2.426.3 +1 CWE-27