Jenkins vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-2033 · ADVISORY
• access.redhat.com/errata/RHEA-2013:1032 · WEB
• access.redhat.com/security/cve/CVE-2013-2033 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/84004 · WEB
• issues.jenkins-ci.org/browse/SECURITY-67 · WEB
• wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-05-02 · WEB
• cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-05-02.cb · WEB
• osvdb.org/92982 · Broken Link

org.jenkins-ci.main:jenkins-core のその他の脆弱性

• CVE-2026-53442中 5.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job conf…
• CVE-2026-53441中 5.4Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of …
• CVE-2026-53440中 4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security…
• CVE-2026-53439中 4.3Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine ot…
• CVE-2026-53438中 4.3A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking I…