Archive
26 January 2018
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Low 2.2
Improper Input Validation in Jenkins
The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged…