Jenkins
Jenkins Security Releases - April 2018
jenkins-2018-04 Apr 1, 2018 Source: Vendor
Jenkins security advisories for April 2018: 7 CVEs, 7 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
7 lines
Showing 1–7 of 7 matching , clear filters
CVE-2018-1000169
BR2018-0000-041282
SECURITY-754
unclaimed
CLI leaked existence of views and agents with attacker-specified names to users without Overall/Read permission
Credited as Assaf Berg
CVE-2018-1000170
BR2018-0000-041283
SECURITY-759
unclaimed
Cross-site scripting vulnerability in confirmation dialogs displaying item names
Credited as Jesper den Boer
CVE-2018-1000173
BR2018-0000-041284
SECURITY-442
unclaimed
Session fixation vulnerability in Google Login Plugin
Credited as Emeric Vernat
CVE-2018-1000174
BR2018-0000-041285
SECURITY-684
unclaimed
Open redirect vulnerability in Google Login Plugin
Credited as Suhas Sunil Gaikwad of Postman @postmanclient
CVE-2018-1000175
BR2018-0000-041286
SECURITY-784
unclaimed
Path traversal vulnerability allows arbitrary file writing in HTML Publisher Plugin
Credited as Kalle Niemitalo, Procomp Solutions Oy
CVE-2018-1000176
BR2018-0000-041287
SECURITY-729
unclaimed
Email Extension Plugin showed plain text SMTP password in configuration form field
Credited as Matthias Nodeland
CVE-2018-1000177
BR2018-0000-041288
SECURITY-730
unclaimed
Stored XSS vulnerability in S3 Publisher Plugin
Credited as Oleg Nenashev, CloudBees, Inc.