Jenkins Open Redirect Through Newline/Tab Characters in Redirect URL

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-53437 · ADVISORY
• jenkinsci/jenkins commit b32f2f2 · WEB
• jenkinsci/jenkins commit 8ef5289 · WEB
• jenkins.io/security/advisory/2026-06-10 · WEB
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53437.json · WEB
• jenkinsci/jenkins · PACKAGE
• bugzilla.redhat.com/show_bug.cgi · WEB
• access.redhat.com/security/cve/CVE-2026-53437 · WEB
• access.redhat.com/errata/RHSA-2026:60259 · WEB
• access.redhat.com/errata/RHSA-2026:60256 · WEB
• access.redhat.com/errata/RHSA-2026:60254 · WEB
• access.redhat.com/errata/RHSA-2026:60252

Lỗ hổng khác của org.jenkins-ci.main:jenkins-core

• CVE-2026-53442TRUNG BÌNH 5.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job conf…
• CVE-2026-53441TRUNG BÌNH 5.4Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of …
• CVE-2026-53440TRUNG BÌNH 4.3Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security…
• CVE-2026-53439TRUNG BÌNH 4.3Missing permission checks in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allow attackers with Overall/Read permission to determine ot…
• CVE-2026-53438TRUNG BÌNH 4.3A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking I…