Most recent entries from all

cnvd-2016-03161

EUVD-2026-83786

fkie_cve-2016-3726

Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.

GHSA-rx4r-gxpc-h85x — Jenkins affected by Open Redirect Vulnerability

Affected: Maven: org.jenkins-ci.main:jenkins-core

gsd-2016-3726

RHSA-2016:1206 — Red Hat Security Advisory: jenkins security update

jenkins: Arbitrary build parameters are passed to build scripts as environment variables (SECURITY-170) jenkins: Malicious users with multiple user accounts can prevent other users from logging in (SECURITY-243) jenkins: Information on installed plugins exposed via API (SECURITY-250) jenkins: Encrypted secrets (e.g. passwords) were leaked to users with permission to read configuration (SECURITY-266) jenkins: Regular users can trigger download of update site metadata (SECURITY-273) jenkins: Open redirect to scheme-relative URLs (SECURITY-276) jenkins: Granting the permission to read node configurations allows access to overall system configuration (SECURITY-281)