Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins — Jenkins Security Advisory 2024-10-02 Clear all filters
TI-2024-32072 CVE-2024-47804 · GHSA-f9qj-77q2-h5c5

Type confusion in Jenkins

Priority LOW 21

If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Je…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00669 Published 2024-10-02 Fixed in 2.462.3, 2.479 CWE-843
TI-2024-32071 CVE-2024-47803 · GHSA-pj95-ph4q-4qm4

Information disclosure through error messages in Jenkins

Priority LOW 22

Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the `secretTextarea` form field.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00822 Published 2024-10-02 Fixed in 2.462.3, 2.479 CWE-209