CVE Intelligence

Vulnerabilidades de Jenkins Project

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Jenkins Project: 170 registro(s), com severidade, exploração e correções.

Jenkins 36Jenkins Script Security Plugin 14Jenkins Gitee Plugin 4Jenkins LDAP Plugin 3Jenkins Active Directory Plugin 3Jenkins Pipeline: Groovy Libraries Plugin 3Jenkins Multijob Plugin 3Jenkins Publish to Bitbucket Plugin 3Jenkins Pipeline: Groovy Plugin 3Jenkins Assembla Plugin 3Jenkins Contrast Continuous Application Security Plugin 3Jenkins Parameterized Remote Trigger Plugin 2Jenkins SCM-Manager Plugin 2Jenkins Coverage Plugin 2Jenkins Nexus Task Runner Plugin 2Jenkins SAML Plugin 2Jenkins Themis Plugin 2Jenkins Pipeline: Build Step Plugin 2Jenkins Microsoft Entra ID (previously Azure AD) Plugin 2Jenkins LoadNinja Plugin 2Jenkins GitLab Plugin 2Jenkins Zowe zDevOps Plugin 2Jenkins External Workspace Manager Plugin 2Jenkins Credentials Binding Plugin 2Jenkins GitHub Branch Source Plugin 2Jenkins Curseforge Publisher Plugin 2Jenkins MCP Server Plugin 2Jenkins Start Windocks Containers Plugin 2Jenkins ByteGuard Build Actions Plugin 2Jenkins EC2 Fleet Plugin 2Jenkins Git client Plugin 2Jenkins Job Configuration History Plugin 2Jenkins Bitbucket Push and Pull Request Plugin 2Jenkins AWS CodeBuild Plugin 1Jenkins CodeSonar Plugin 1Jenkins Horreum Plugin 1Jenkins Ivy Report Plugin 1Jenkins Priority Sorter Plugin 1Jenkins Sauce OnDemand Plugin 1Jenkins Git Parameter Plugin 1

Somente exploradas (KEV) →

CVE-2026-42525 Média · 4.3 CWE-601 29/04/2026
Open Redirect em Jenkins Azure Ad
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
CVE-2026-42524 Alta · 8.0 CWE-79 29/04/2026
Cross-site Scripting (XSS) em Jenkins Html Publisher
Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2026-42523 Crítica · 9.0 CWE-79 29/04/2026
Cross-site Scripting (XSS) em Jenkins Github
Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.
CVE-2026-42522 Média · 4.3 CWE-862 29/04/2026
Missing Authorization em Jenkins Github Branch Source
A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL with attacker-specified GitHub App credentials.
CVE-2026-42521 Média · 6.5 CWE-502 29/04/2026
Deserialization of Untrusted Data em Jenkins Matrix Authorization Strategy
Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when deserializing inheritance strategies, without restricting the classes that can be instantiated, allowing attackers with Item/Configure permission to instantiate arbitrary types, which may lead to information disclosure or other impacts depending on the classes available on the classpath.
CVE-2026-42520 Alta · 7.5 CWE-22 29/04/2026
Path Traversal em Jenkins Credentials Binding
Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.
CVE-2026-42519 Média · 4.3 CWE-862 29/04/2026
Missing Authorization em Jenkins Script Security
A missing permission check in Jenkins Script Security Plugin 1399.ve6a_66547f6e1 and earlier allows attackers with Overall/Read permission to enumerate pending and approved Script Security classpaths.
CVE-2026-33004 Média · 4.3 CWE-200 18/03/2026
Exposure of Sensitive Information em Jenkins Loadninja
Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2026-33003 Média · 4.3 CWE-312 18/03/2026
Cleartext Storage of Sensitive Information em Jenkins Loadninja
Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVE-2026-33002 Alta · 7.5 CWE-350 18/03/2026
Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both…
Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.
CVE-2026-33001 Alta · 8.8 CWE-59 18/03/2026
Link Following em Jenkins
Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write files to arbitrary locations on the filesystem, restricted only by file system access permissions of the user running Jenkins. This can be exploited to deploy malicious scripts or plugins on the controller by attackers with Item/Configure permission, or able to control agent processes.
CVE-2026-27100 Média · 4.3 CWE-200 18/02/2026
Exposure of Sensitive Information em Jenkins
Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.
CVE-2026-27099 Alta · 8.0 CWE-79 18/02/2026
Cross-site Scripting (XSS) em Jenkins
Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure or Agent/Disconnect permission.
CVE-2025-67643 Média · 4.3 CWE-22 10/12/2025
Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspace directory.
CVE-2025-67642 Média · 4.3 CWE-282 10/12/2025
Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.
CVE-2025-67641 Média · 5.4 CWE-79 10/12/2025
Jenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerability
Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to use a `javascript:` scheme URL as identifier by configuring the job through the REST API, resulting in a stored cross-site scripting (XSS) vulnerability.
CVE-2025-67640 Média · 5.0 CWE-78 10/12/2025
OS Command Injection em Jenkins Git Client
Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.
CVE-2025-67639 Baixa · 3.5 CWE-352 10/12/2025
Jenkins has a CSRF vulnerability on the login form
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
CVE-2025-67638 Média · 4.3 CWE-312 10/12/2025
Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2025-67637 Média · 4.3 CWE-312 10/12/2025
Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVE-2025-67636 Média · 4.3 CWE-862 10/12/2025
Jenkins is missing a permission check on password fields
A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.
CVE-2025-67635 Alta · 7.5 CWE-404 10/12/2025
Jenkins has a Denial of service vulnerability in HTTP-based CLI
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.
CVE-2025-64150 Média · 5.4 CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64149 Média · 5.4 CWE-352 29/10/2025
Cross-Site Request Forgery (CSRF) em Jenkins Publish To Bitbucket
A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64148 Média · 4.3 CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.