Jan 24, 2024 · Exploitation requires that all of the following conditions are met: The "Resource Root URL" functionality is enabled (see documentation). Attackers can retrieve ...

Jul 12, 2023 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another ...

Sep 6, 2023 · ... URL, when rendering an error message. This results in an HTML injection vulnerability. Since Jenkins 2.275 and LTS 2.263.2, a security hardening for form ...

Oct 25, 2023 · ... URL on the build page. This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. As of ...

Sep 20, 2023 · Description: Jenkins creates a temporary file when a plugin is deployed directly from a URL. Jenkins 2.423 and earlier, LTS 2.414.1 and ...

May 12, 2024 · Open Microsoft Entra ID , click App registrations. Click New registration. Add a new Reply URL https://{your_jenkins_host}/securityRealm/finishLogin .

Issues · Releases · Health Score

Jul 26, 2023 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another ...

Jun 14, 2023 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another ...

Mar 6, 2024 · This allows attackers with Overall/Read permission to connect to an attacker-specified TCP or Unix socket URL. Additionally, the plugin reconfigures itself ...

Aug 16, 2023 · This vulnerability allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job. This issue ...