CVE-2019-10354

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly…

published July 17, 2019

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01647 · 76.3th percentile
Published
2019-07-17T15:45Z
EPSS history
Timeline
  • 17 JUL 15:45Z
    A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly…
    cvelistv5