maven

org.jenkins-ci.main:jenkins-core

100 Total advisories

100 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.jenkins-ci.main:jenkins-core is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.jenkins-ci.main:jenkins-core

Vulnerabilities

Jenkins: Missing permission check allows unauthorized cancellation of queue items

Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations

Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL

Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL

Jenkins exposes other users' timezone and view names to users with Overall/Read permission

Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonation

Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"

Jenkins: Stored XSS vulnerability in node offline cause description

Jenkins has a link following vulnerability allows arbitrary file creation

Jenkins has a build information disclosure vulnerability through Run Parameter

Jenkins has a stored XSS vulnerability in node offline cause description

Jenkins is missing a permission check on password fields

Jenkins's build authorization token is stored and displayed in plain text

Jenkins's build authorization token is stored and displayed in plain text

Jenkins has a Denial of service vulnerability in HTTP-based CLI

Jenkins has a CSRF vulnerability on the login form

Jenkins has a log message injection vulnerability

Jenkins has a missing permission check, allowing users to obtain agent names

Jenkins is missing a permission check in the authenticated users' profile menu

Cross-site Scripting vulnerability in Jenkins

Jenkins cross-site request forgery (CSRF) vulnerability

Jenkins does not perform a permission check in an HTTP endpoint

Incorrect Authorization in Jenkins Core

Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

Jenkins exposes multi-line secrets through error messages

Cross-site WebSocket hijacking vulnerability in the Jenkins CLI

Jenkins item creation restriction bypass vulnerability

Information disclosure through error stack traces related to agents

Incorrect Authorization in Jenkins Core

Jenkins Open Redirect vulnerability

Incorrect Permission Preservation in Jenkins Core

Jenkins Missing Permission Check

Jenkins Remoting library arbitrary file read vulnerability

Jenkins Missing Permission Check

Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission

Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission

Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validation

Jenkins discloses project names via fingerprints

Deserialization of Untrusted Data in Jenkins

Deserialization of Untrusted Data in Jenkins

Jenkins temporary plugin file created with insecure permissions

Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Jenkins Cross-site Scripting vulnerability

Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Jenkins Path Traversal vulnerability

Jenkins Exposes Sensitive Information from Job Configuration

Jenkins has CRLF Injection Vulnerability in the CLI

Jenkins allows Execution of Code by Opening a JRMP Listener

Jenkins allows for Privilege Escalation by Remote Authenticated Users

Jenkins allows Cross-Site Scripting (XSS)

Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

Jenkins Vulnerable to Denial of Service (DoS)

Jenkins allows for Privilege Escalation by Remote Authenticated Users

Jenkins allows Remote Users to Obtain Sensitive Information from a Plugin Code

Jenkins allows for Code Execution via Crafted Packet to the CLI

Jenkins Vulnerable to Clickjacking

Jenkins allows Remote Attackers to Hijack Sessions

Jenkins allows Cross-Site Scripting (XSS) in User Configuration

Jenkins allows Cross-Site Scripting (XSS)

Jenkins allows Deserialization of Untrusted Data via an XML File

Jenkins does not Verify Checksums for Plugin Files

Jenkins Exposes Sensitive Information via API URL

Jenkins affected by Open Redirect Vulnerability

Jenkins allows Remote Users to Inject Build Parameters

Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

Jenkins allows Cross-Site Scripting (XSS)

Jenkins allows Bypass of Access Restrictions

Jenkins allows Unauthorized Viewing of Queue API Information

Jenkins allows Administrators to Access API Tokens

Jenkins has Local File Inclusion Vulnerability

Jenkins has Information Disclosure via Sidepanel Widget

Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor

Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI

Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack

Jenkins Vulnerable to Denial of Service (DoS) via Crafted Payload

Jenkins allows Remote Users to Build Arbitrary Jobs

Jenkins allows Cross-Site Scripting (XSS)