Jenkins allows attackers to configure restricted projects

MEDIO 4.0CVE-2013-7330 · GHSA-h5jv-hg68-mjhg · Published 17/10/2014 · updated 17/06/2026

In breve

CVE-2013-7330 è una vulnerabilità MEDIO (CVSS 4.0) che riguarda org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.6%, superiore al 75.9% delle vulnerabilità.
Correzione: aggiornare a 1.502, 1.480.3 o successiva.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.481, < 1.502< 1.480.3`	`1.5021.480.3`
jenkins jenkins	`≤ 1.501`	No fix yet

Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.

NVD description

Jenkins before 1.502 allows remote authenticated users to configure an otherwise restricted project via vectors related to post-build actions.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.481, < 1.502< 1.480.3

1.5021.480.3

≤ 1.501

No fix yet

Altre vulnerabilità di org.jenkins-ci.main:jenkins-core

Vedi tutto →