Past year
All results
- All results
- Verbatim
Jan 24, 2024 · Exploitation requires that all of the following conditions are met: The "Resource Root URL" functionality is enabled (see documentation). Attackers can retrieve ...
Missing: book/ | Show results with:book/
May 12, 2024 · Open Microsoft Entra ID , click App registrations. Click New registration. Add a new Reply URL https://{your_jenkins_host}/securityRealm/finishLogin .
Jul 12, 2023 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another ...
Missing: book/ | Show results with:book/
Sep 20, 2023 · Temporary plugin file created with insecure permissions ... Description: Jenkins creates a temporary file when a plugin is deployed directly from a URL. Jenkins ...
Missing: book/ | Show results with:book/
Oct 25, 2023 · ... URL on the build page. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. As of ...
Missing: book/ | Show results with:book/
Dec 13, 2023 · This allows attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML. Additionally, the plugin ...
Missing: book/ | Show results with:book/
Jun 14, 2023 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another ...
Missing: book/ | Show results with:book/
Mar 6, 2024 · This allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL. Additionally, the plugin reconfigures itself ...
Missing: book/ | Show results with:book/
Sep 6, 2023 · Description: AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form validation URL, when rendering an error ...
Missing: book/ | Show results with:book/
Jul 26, 2023 · This allows attackers with global Item/Configure permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through ...
Missing: book/ | Show results with:book/