Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-10354

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6jfc-mc97-c7wg

Missing Authorization in Jenkins A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

gitlab/maven/org.jenkins-ci.main/jenkins-core/CVE-2019-10354

Information Exposure A vulnerability in the Stapler web framework allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

gitlab/maven/org.kohsuke.stapler/stapler-parent/CVE-2019-10354

Missing Authorization A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.