Description
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier exposed session identifiers on a user's detail object in the whoAmI diagnostic page.
Remediation
References
Related Vulnerabilities
WordPress Plugin RBX Gallery 'uploader.php' Arbitrary File Upload (2.1)
WordPress 4.8.x Multiple Vulnerabilities (4.8 - 4.8.21)
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-4707)
WordPress Plugin Quick Contact Form Security Bypass (8.0.1)
WordPress Plugin Total Sales For Woocommerce Cross-Site Scripting (1.1)