Feb 15, 2022 · This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified username and password.
This page lists all security advisories that have been published so far. This index is also available as an RSS feed. 2024. Jenkins Security Advisory 2024-04 ...
May 17, 2022 · This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to submit crafted Rundeck webhook payloads.
Missing: 2022-02-15/ | Show results with:2022-02-15/
Fixed the CSRF and Permission check security issues documented in https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1017; The Post Scan Action ...
Enhances Pipeline plugin to handle branches better by automatically grouping builds from different branches.
Missing: /url | Show results with:/url
Security Advisories Reporting Vulnerabilities. About. Roadmap ... Maintenance. Use HTTPS SCM URL (#201) @basil ... Jenkins Security Advisory 2022-02-15 ( ace0de3 ) ...
... <url> <loc>https://www.jenkins.io/2.0/</loc> ... security-fix-hudson-1-365-released/</loc> ... advisory-in-jenkins-core/</loc> <lastmod>2012-03-06</lastmod> ...
... Jenkins security advisories ... In some cases, HTTP proxies with authentication did not work for HTTPS URLs. ... Always send usage statistics over HTTPs to the new ...