Veille CVE

Recherche « Jenkins Project Jenkins Credentials Binding Plugin »

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Jenkins Project Jenkins Credentials Binding Plugin » ✕
  1. CVE-2026-48922 7.5 Élevée

    Jenkins Project Jenkins Credentials Binding Plugin · Jenkins credentials binding

    Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.

  2. CVE-2026-42520 7.5 Élevée

    Jenkins Project Jenkins Credentials Binding Plugin · Jenkins credentials binding

    Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.