Description

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

Remediation

References

CVE-2019-10354

Related Vulnerabilities

MongoDb Missing Authorization Vulnerability (CVE-2026-13078)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-3057)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0446)

Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-33930)

MySQL CVE-2017-3463 Vulnerability (CVE-2017-3463)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-862 CVE-2019-10354