Jenkins
Jenkins Security Advisory 2018-09-25
2018-09-25 Sep 25, 2018 Source: Vendor
Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2018-09-25/. 21 SECURITY issues listed. Draft. Review before publishing.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.jenkins.io/security/advisory/2018-09-25/
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
16 lines
Showing 1–4 of 4 matching , clear filters
Acknowledgement
BR2018-0000-020571
SECURITY-1108
unclaimed
CSRF vulnerability and missing permission checks in Dimensions Plugin
Credited as Daniel Beck, CloudBees, Inc.
Acknowledgement
BR2018-0000-020575
SECURITY-1011
unclaimed
SECURITY-1011
Credited as Oleg Nenashev, CloudBees, Inc.
Acknowledgement
BR2018-0000-020579
SECURITY-845
unclaimed
Publish Over Dropbox Plugin stored credentials in plain text
Credited as Viktor Gazdag
Acknowledgement
BR2018-0000-020583
SECURITY-1075
unclaimed
Stored XSS vulnerability in Metadata Plugin
Credited as Zhouyuan Yang of Fortinet's FortiGuard Labs