Jenkins Vulnerable to Clickjacking

ALTO 7.5CVE-2014-2063 · GHSA-w3f5-gq7j-m797 · Published 17/10/2014 · updated 17/06/2026

In breve

CVE-2014-2063 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.jenkins-ci.main:jenkins-core, jenkins (jenkins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.3%, superiore al 83.6% delle vulnerabilità.
Correzione: aggiornare a 1.551, 1.532.2 o successiva.

Package	Affected versions	Patched versions
org.jenkins-ci.main:jenkins-core Maven	`≥ 1.533, < 1.551< 1.532.2`	`1.5511.532.2`
jenkins jenkins	`≤ 1.532.1≤ 1.550`	No fix yet

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

NVD description

Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.533, < 1.551< 1.532.2

1.5511.532.2

≤ 1.532.1≤ 1.550

No fix yet

Altre vulnerabilità di org.jenkins-ci.main:jenkins-core

Vedi tutto →