| Jenkins Open Redirect Through Newline/Tab Characters in Redirect URLCVE-2026-53437 · GHSA-463R-5M89-4XFR |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins arbitrary type deserialization from attacker-controlled config.xml allows remote code execution and user impersonationCVE-2026-53435 · GHSA-G2XQ-2V27-4RH3 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurationsCVE-2026-53442 · GHSA-M6WV-WH8G-64XC |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"CVE-2026-53440 · GHSA-92M7-4FPW-2WXM |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins exposes other users' timezone and view names to users with Overall/Read permissionCVE-2026-53439 · GHSA-G28P-6MCC-V4RV |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins: Missing permission check allows unauthorized cancellation of queue itemsCVE-2026-53438 · GHSA-MW82-XCG6-GX79 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URLCVE-2026-53436 · GHSA-3RQH-HCH3-JHPC |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins: Stored XSS vulnerability in node offline cause description CVE-2026-53441 · GHSA-93QH-VWRM-C5PW |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins has a link following vulnerability allows arbitrary file creationCVE-2026-33001 · GHSA-R6QV-FRPC-Q66C |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins has a DNS rebinding vulnerability in WebSocket CLI origin validationCVE-2026-33002 · GHSA-PHHV-63FH-RRC8 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins has a build information disclosure vulnerability through Run Parameter CVE-2026-27100 · GHSA-WFHP-QGM8-5P5C |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins has a stored XSS vulnerability in node offline cause descriptionCVE-2026-27099 · GHSA-85H6-5M3V-GX37 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins has a Denial of service vulnerability in HTTP-based CLICVE-2025-67635 · GHSA-9P56-P6MW-W8QC |
org.jenkins-ci.main:cliorg.jenkins-ci.main:jenkins-core |
Maven |
زیاد
|
اصلاح گزارش شده |
|
| Jenkins's build authorization token is stored and displayed in plain textCVE-2025-67638 · GHSA-HXJG-2JVF-H3RX |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins has a CSRF vulnerability on the login formCVE-2025-67639 · GHSA-6837-QGRC-X5P6 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Jenkins's build authorization token is stored and displayed in plain textCVE-2025-67637 · GHSA-FXJ7-6V9W-XC76 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins is missing a permission check on password fieldsCVE-2025-67636 · GHSA-P3F5-98CV-562J |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins has a log message injection vulnerabilityCVE-2025-59476 · GHSA-QRH5-JG98-CR48 |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins is missing a permission check in the authenticated users' profile menu CVE-2025-59475 · GHSA-223M-4RFP-646H |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Jenkins has a missing permission check, allowing users to obtain agent namesCVE-2025-59474 · GHSA-67V4-38H7-9JJP |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
