Skip to content
OpenAdvisories

Archive

9 February 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5

    Jenkins TAP Plugin allows Path Traversal

    Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.

  • High 7.3

    Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection

    The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.