Jenkins
Jenkins Security Releases - November 2017
jenkins-2017-11 Nov 1, 2017 Source: Vendor
Jenkins security advisories for November 2017: 2 CVEs, 2 credited researchers.
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2017-1000391
BR2017-0000-041075
SECURITY-499
unclaimed
Unsafe use of user names as directory names
Credited as Darren Zhao
CVE-2017-1000392
BR2017-0000-041076
SECURITY-641
unclaimed
Persisted XSS vulnerability in autocompletion suggestions
Credited as Viktor Gazdag of NCC Group