Credentials Binding vulnerabilities
3 known vulnerabilities in Credentials Binding from Jenkins. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize…
Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, whi
- 7.5 High severity
Jenkins Credentials Binding Plugin: Improper Limitation of a Pathname to a Restricted Directory
Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can le
- 7.3 High severity
Jenkins Credentials Binding Plugin: Insufficiently Protected Credentials
Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.