Description

BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.

Remediation

References

CVE-2014-2058

Related Vulnerabilities

phpMyFAQ Weak Password Requirements Vulnerability (CVE-2023-0793)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41164)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14164)

Oracle Application Server CVE-2008-5438 Vulnerability (CVE-2008-5438)

WordPress Plugin UserPro-Community and User Profile Cross-Site Scripting (4.9.23)

Severity

Medium

Classification

CVE-2014-2058 CWE-264

Tags

Missing Update Known Vulnerabilities