https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:09:06 +0000 https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21607 <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.</p> <p><strong>Affected:</strong> Bitnami: jenkins</p> <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.</p> https://cve.radiocsirt.org/vuln/bit-jenkins-2021-21607 https://cve.radiocsirt.org/vuln/cnvd-2021-04647 cnvd-2021-04647 https://cve.radiocsirt.org/vuln/cnvd-2021-04647 https://cve.radiocsirt.org/vuln/euvd-2026-22316 EUVD-2026-22316 https://cve.radiocsirt.org/vuln/euvd-2026-22316 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21607 <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.</p> <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21607 https://cve.radiocsirt.org/vuln/ghsa-cxqw-vjcr-gp5g <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics.</p> <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters.</p> <p>This allows attackers to request or to have legitimate Jenkins users request crafted URLs that rapidly use all available memory in Jenkins, potentially leading to out of memory errors.</p> <p>Jenkins 2.275, LTS 2.263.2 limits the maximum size of graphs to an area of 10 million pixels. If a larger size is requested, the default size for the graph will be rendered instead.</p> <p>This threshold can be configured by setting the [Java system property](https://www.jenkins.io/doc/book/managing/system-properties/) `hudson.util.Graph.maxArea` to a different number on startup.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.main:jenkins-core</p> <p>Jenkins renders several different graphs for features like agent and label usage statistics, memory usage, or various plugin-provided statistics.</p> <p>Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit the graph size provided as query parameters.</p> <p>This allows attackers to request or to have legitimate Jenkins users request crafted URLs that rapidly use all available memory in Jenkins, potentially leading to out of memory errors.</p> <p>Jenkins 2.275, LTS 2.263.2 limits the maximum size of graphs to an area of 10 million pixels. If a larger size is requested, the default size for the graph will be rendered instead.</p> <p>This threshold can be configured by setting the [Java system property](https://www.jenkins.io/doc/book/managing/system-properties/) `hudson.util.Graph.maxArea` to a different number on startup.</p> https://cve.radiocsirt.org/vuln/ghsa-cxqw-vjcr-gp5g https://cve.radiocsirt.org/vuln/gsd-2021-21607 gsd-2021-21607 https://cve.radiocsirt.org/vuln/gsd-2021-21607 https://cve.radiocsirt.org/vuln/rhsa-2021:0423 <p>ant: insecure temporary file vulnerability ant: insecure temporary file jenkins: Arbitrary file read vulnerability in workspace browsers jenkins: XSS vulnerability in notification bar jenkins: Improper handling of REST API XML deserialization errors jenkins: Path traversal vulnerability in agent names jenkins: Arbitrary file existence check in file fingerprints jenkins: Excessive memory allocation in graph URLs leads to denial of service jenkins: Stored XSS vulnerability in button labels jenkins: Missing permission check for paths with specific prefix jenkins: Reflected XSS vulnerability in markup formatter preview jenkins: Stored XSS vulnerability on new item page jenkins: Filesystem traversal by privileged users</p> <p>ant: insecure temporary file vulnerability ant: insecure temporary file jenkins: Arbitrary file read vulnerability in workspace browsers jenkins: XSS vulnerability in notification bar jenkins: Improper handling of REST API XML deserialization errors jenkins: Path traversal vulnerability in agent names jenkins: Arbitrary file existence check in file fingerprints jenkins: Excessive memory allocation in graph URLs leads to denial of service jenkins: Stored XSS vulnerability in button labels jenkins: Missing permission check for paths with specific prefix jenkins: Reflected XSS vulnerability in markup formatter preview jenkins: Stored XSS vulnerability on new item page jenkins: Filesystem traversal by privileged users</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0423