Description

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

Remediation

References

CVE-2019-10354

Related Vulnerabilities

WordPress Plugin WP Fastest Cache Local File Inclusion (0.8.5.9)

Liferay DXP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-26265)

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-13397)

WordPress Plugin Captcha Backdoor (4.4.4)

Roundcube Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-62643)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-862 CVE-2019-10354