Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins — Jenkins Security Advisory 2026-03-18 Clear all filters
TI-2026-25450 CVE-2026-33002 · GHSA-phhv-63fh-rrc8

Origin validation error in Jenkins

Priority LOW 35

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for compariso…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00284 Published 2026-03-18 Partial fix · 2.427, 2.555 +1 CWE-350
TI-2026-25449 CVE-2026-33001 · GHSA-r6qv-frpc-q66c

Link following in Jenkins

Priority MEDIUM 44

Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write files to arbitrary locations on the filesyst…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02113 Published 2026-03-18 Partial fix · 2.555, 2.541.3 CWE-59