Description

Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool installation) via crafted update center data.

Remediation

References

CVE-2015-1808

Related Vulnerabilities

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.4.7)

OpenSSL Cryptographic Issues Vulnerability (CVE-2008-7270)

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4752)

WordPress Improper Input Validation Vulnerability (CVE-2011-4957)

WordPress Plugin EmbedSocial-Social Media Feeds, Reviews and Galleries Cross-Site Scripting (1.1.27)

Severity

Low

Classification

CVE-2015-1808 CWE-20

Tags

Missing Update Known Vulnerabilities