Jan 24, 2024 · This advisory announces vulnerabilities in the following Jenkins deliverables: Jenkins (core); Git server Plugin · GitLab Branch Source Plugin ...

Sep 6, 2023 · This advisory announces vulnerabilities in the following Jenkins deliverables: Assembla Auth Plugin · AWS CodeCommit Trigger Plugin · Bitbucket Push and ...

Sep 20, 2023 · Jenkins creates a temporary file when a plugin is deployed directly from a URL. Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates this temporary ...

Oct 25, 2023 · The Jenkins project would like to thank the reporters for discovering and reporting these vulnerabilities: Andrea Chiera, CloudBees, Inc. for SECURITY-3202 ...

Jul 12, 2023 · This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication ...

May 2, 2024 · Calls to code defined inside a sandboxed script are intercepted, and various allowlists are checked to determine whether the call is to be allowed. Multiple ...

Jun 14, 2023 · As of publication of this advisory, we are aware of insufficiently escaped context menu URLs for label expressions, allowing attackers with Item/Configure ...

Jul 26, 2023 · This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control build log contents. Jenkins 2.416, LTS 2.401.3, and ...

Mar 6, 2024 · This advisory announces vulnerabilities in the following Jenkins deliverables: AppSpider Plugin · Bitbucket Branch Source Plugin · Build Monitor View Plugin ...

Aug 16, 2023 · This vulnerability allows attackers to connect to an attacker-specified URL, capturing GitHub credentials associated with an attacker-specified job. This issue ...