Skip to content
OpenAdvisories

Archive

26 January 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 2.2

    Improper Input Validation in Jenkins

    The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged…