Security
فارسی
All products

Red Hat OpenShift Container Platform 4/jenkins

Red Hat · Package
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Denial of Service due to parser crashCVE-2022-40152 · GHSA-3F7H-MF4Q-VRM4 com.fasterxml.woodstox:woodstox-coreMigration Toolkit for Runtimes/xstream MavenRed Hat Medium Fix reported
Guava vulnerable to insecure use of temporary directoryCVE-2023-2976 · GHSA-7G45-4RM6-3MM3 com.google.guava:guavaMigration Toolkit for Runtimes/org.jboss.windup-windup-parent MavenRed Hat Medium Fix reported
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind MavenRed Hat High Fix reported
Encoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429 · GHSA-VJV5-GP2W-65VM org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty MavenRed Hat Medium Fix reported
Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core MavenRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Information Disclosure in GuavaCVE-2020-8908 · GHSA-5MG8-W23W-74H3 com.google.guava:guavaRed Hat Enterprise Linux 7/guava MavenRed Hat Low Fix reported
Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
HTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478 · GHSA-WGH7-54F2-X98R org.eclipse.jetty.http2:http2-hpackorg.eclipse.jetty.http3:http3-qpack MavenRed Hat High Fix reported
Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework MavenRed Hat Medium Fix reported
Information Disclosure in Apache GroovyCVE-2020-17521 · GHSA-RCJJ-H6GH-JF3R org.codehaus.groovy:groovy-allorg.codehaus.groovy:groovy MavenRed Hat Medium Fix reported
Authorization bypass in Spring SecurityCVE-2022-22978 · GHSA-HH32-7344-CG2F org.springframework.security:spring-security-coreorg.springframework.security:spring-security-web MavenRed Hat Critical Fix reported
Jenkins temporary uploaded file created with insecure permissionsCVE-2023-43498 · GHSA-HQ87-H4JG-VXFW org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Low Fix reported
Jenkins does not exclude sensitive build variables from searchCVE-2023-43494 · GHSA-279F-QWGH-H5MP org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins MavenRed Hat Medium Fix reported
Improper Handling of Length Parameter Inconsistency in Apache AntCVE-2021-36374 · GHSA-5V34-G2PX-J4FW org.apache.ant:antRed Hat BPM Suite 6/ant MavenRed Hat Medium Fix reported
Improper Privilege Management in Spring FrameworkCVE-2021-22118 · GHSA-GFWJ-FWQJ-FP3V org.springframework:spring-webRed Hat OpenShift Container Platform 3.11/jenkins MavenRed Hat High Fix reported
Improper Handling of Length Parameter Inconsistency in Apache AntCVE-2021-36373 · GHSA-Q5R4-CFPX-H6FH org.apache.ant:antRed Hat BPM Suite 6/ant MavenRed Hat Medium Fix reported
Cross-Site Request Forgery in Jenkins Mailer PluginCVE-2022-20613 · GHSA-85RQ-HP8X-GHJQ org.jenkins-ci.plugins:mailerRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat Medium Fix reported
Incorrect Permission Assignment for Critical Resource in Jenkins Mailer PluginCVE-2022-20614 · GHSA-558X-H7RG-997V org.jenkins-ci.plugins:mailerRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat Medium Fix reported
Stored XSS vulnerability in Matrix Project PluginCVE-2022-20615 · GHSA-VQWG-4V6F-H6X5 org.jenkins-ci.plugins:matrix-projectRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins MavenRed Hat Medium Fix reported