Jenkins Vulnerable to Clickjacking

ALTO 7.5CVE-2014-2063 · GHSA-w3f5-gq7j-m797 · Published 17/10/2014 · updated 17/06/2026

En resumen

CVE-2014-2063 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.3%, mayor que el 83.6% de las vulnerabilidades.
Solución: actualizar a 1.551, 1.532.2 o posterior.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.533, < 1.551< 1.532.2`	`1.5511.532.2`
jenkins jenkins	`≤ 1.532.1≤ 1.550`	No fix yet

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

NVD description

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.533, < 1.551< 1.532.2

1.5511.532.2

≤ 1.532.1≤ 1.550

No fix yet

Más vulnerabilidades de org.jenkins-ci.main:jenkins-core

Ver todo →