Vulnerabilidades de Jenkins
CVEs publicadas que afetam produtos de Jenkins: 116 registro(s), com severidade, exploração e correções.
Jenkins 36Script Security 14Pipeline: Groovy 3Assembla 3Active Directory 3Publish To Bitbucket 3Zowe Zdevops 2Contrast Continuous Application Security 2Ec2 Fleet 2Git Client 2Ldap 2Github Branch Source 2Credentials Binding 2Loadninja 2Byteguard Build Actions 2Themis 2Start Windocks Container 2Mcp Server 2Nexus Task Runner 2Curseforge Publisher 2Fitnesse 1Official Owasp Zap 1Extensible Choice Parameter 1Jdepend 1Saml 1Priority Sorter 1Bitbucket Push And Pull Request 1Job Configuration History 1Git Parameter 1Redpen - Pipeline Reporter For Jira 1Hashicorp Vault 1Coverage 1Eggplant Runner 1Multijob 1Buildgraph-view 1Job Import 1Bitbucket Oauth 1Appspider 1Pipeline: Groovy Libraries 1Email Extension 1
CVE-2026-33003
Média · 4.3
CWE-312 18/03/2026
Cleartext Storage of Sensitive Information em Jenkins Loadninja
Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVE-2026-33002
Alta · 7.5
CWE-350 18/03/2026
Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both…
Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.
CVE-2026-33001
Alta · 8.8
CWE-59 18/03/2026
Link Following em Jenkins
Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives to write files to arbitrary locations on the filesystem, restricted only by file system access permissions of the user running Jenkins.
This can be exploited to deploy malicious scripts or plugins on the controller by attackers with Item/Configure permission, or able to control agent processes.
CVE-2026-27100
Média · 4.3
CWE-200 18/02/2026
Exposure of Sensitive Information em Jenkins
Jenkins 2.550 and earlier, LTS 2.541.1 and earlier accepts Run Parameter values that refer to builds the user submitting the build does not have access to, allowing attackers with Item/Build and Item/Configure permission to obtain information about the existence of jobs, the existence of builds, and if a specified build exists, its display name.
CVE-2026-27099
Alta · 8.0
CWE-79 18/02/2026
Cross-site Scripting (XSS) em Jenkins
Jenkins 2.483 through 2.550 (both inclusive), LTS 2.492.1 through 2.541.1 (both inclusive) does not escape the user-provided description of the "Mark temporarily offline" offline cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure or Agent/Disconnect permission.
CVE-2025-67643
Média · 4.3
CWE-22 10/12/2025
Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability
Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploading artifacts to Jira, allowing attackers with Item/Configure permission to retrieve files present on the Jenkins controller workspace directory.
CVE-2025-67642
Média · 4.3
CWE-282 10/12/2025
Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Vault credentials they are not entitled to.
CVE-2025-67641
Média · 5.4
CWE-79 10/12/2025
Jenkins Coverage Plugin has a stored cross-site scripting (XSS) vulnerability
Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting the job configuration through the UI, allowing attackers with Item/Configure permission to use a `javascript:` scheme URL as identifier by configuring the job through the REST API, resulting in a stored cross-site scripting (XSS) vulnerability.
CVE-2025-67640
Média · 5.0
CWE-78 10/12/2025
OS Command Injection em Jenkins Git Client
Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script generated by the plugin, allowing attackers able to control the workspace directory name to inject arbitrary OS commands.
CVE-2025-67639
Baixa · 3.5
CWE-352 10/12/2025
Jenkins has a CSRF vulnerability on the login form
A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.
CVE-2025-67638
Média · 4.3
CWE-312 10/12/2025
Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2025-67637
Média · 4.3
CWE-312 10/12/2025
Jenkins's build authorization token is stored and displayed in plain text
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier stores build authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVE-2025-67636
Média · 4.3
CWE-862 10/12/2025
Jenkins is missing a permission check on password fields
A missing permission check in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers with View/Read permission to view encrypted password values in views.
CVE-2025-67635
Alta · 7.5
CWE-404 10/12/2025
Jenkins has a Denial of service vulnerability in HTTP-based CLI
Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.
CVE-2025-64150
Média · 5.4
CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64149
Média · 5.4
CWE-352 29/10/2025
Cross-Site Request Forgery (CSRF) em Jenkins Publish To Bitbucket
A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64148
Média · 4.3
CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2025-64147
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Curseforge Publisher
Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2025-64146
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Curseforge Publisher
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2025-64145
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Byteguard Build Actions
Jenkins ByteGuard Build Actions Plugin 1.0 does not mask API tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2025-64144
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Byteguard Build Actions
Jenkins ByteGuard Build Actions Plugin 1.0 stores API tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2025-64143
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Openshift Pipeline
Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.
CVE-2025-64142
Média · 4.3
CWE-862 29/10/2025
Missing Authorization em Jenkins Nexus Task Runner
A missing permission check in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2025-64141
Média · 4.3
CWE-352 29/10/2025
Cross-Site Request Forgery (CSRF) em Jenkins Nexus Task Runner
A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Task Runner Plugin 0.9.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVE-2025-64140
Alta · 8.8
CWE-78 29/10/2025
OS Command Injection em Jenkins Azure Cli
Jenkins Azure CLI Plugin 0.9 and earlier does not restrict which commands it executes on the Jenkins controller, allowing attackers with Item/Configure permission to execute arbitrary shell commands.