Schwachstellen, die jetzt zählen.

russh: russh: Unauthorized key signing via SSH agent confirmation bypass

Red Hat Openshift Container Platform (ansible, aws-efs-csi-driver): Mehrere Schwachstellen

openshift-ansible: openshift-ansible: Installer container downloads and executes remote inventory script without integrity verification

org.mongodb/bson: MongoDB Java Driver: Unintended command modification via improper BSON document length validation

grafana: Grafana: Information disclosure via legacy schema switch in contact points

jenkins: Jenkins: Information disclosure via path traversal in file browser

jenkins: jenkins: Information disclosure via missing permission check in HTTP proxy configuration

jenkins: Jenkins: Root element check bypass via nested object deserialization

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing objects of types marked as storing their configuration in independent top-level configuration files as nested values, allowing attackers to bypass the root element check and potentially inject nested objects.

jenkins: Jenkins: Stored cross-site scripting via unescaped breadcrumb bar tooltips

jenkins: Jenkins: Cross-site scripting via agent HTTP response exceptions

jenkins: Jenkins: Cross-site scripting via workspace browser link computation on agents

jenkins: jenkins: Privilege escalation via Manage Old Data feature

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data" feature that can be acted on by administrators to inject attacker-controlled data, overriding existing user account information, including login passwords.

jenkins: Jenkins: Unauthorized persistent access via 'remember me' cookie generation

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic authentication, including with an API token, to obtain a "remember me" cookie, allowing attackers who have obtained a user's API token to retain access to Jenkins using a "remember me" cookie after the API token is revoked or expires.

jenkins: Jenkins: Unauthorized administrator account creation via setup wizard race condition

In Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first user account does not check whether the setup wizard has been completed, resulting in a race condition that allows unauthenticated attackers to create an administrator account while the initial user account is being replaced.

jenkins: Jenkins: Arbitrary file write via race condition in artifact extraction

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers with Item/Configure permission to write files to arbitrary locations on the Jenkins controller file system.

jenkins: Jenkins: Arbitrary code execution via path traversal in agent names

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary config.xml file when that agent is saved, potentially resulting in arbitrary code execution.

jenkins: jenkins: Arbitrary file read via symbolic link following during item rename

jenkins: jenkins: Arbitrary code execution via legacy agent launch command conversion

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

jenkins: Jenkins: Stored cross-site scripting via improper collection element deserialization

jenkins: Jenkins: Remote code execution via resolves-to attribute handling in XStream

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during XStream deserialization.

kafka: kafka: Denial of Service via excessive memory allocation during record decompression

kafka: kafka: Information disclosure via unauthorized broker configuration validation

kafka: kafka: Information disclosure via configuration validation endpoint

org.apache.kafka/connect-runtime: Apache Kafka Connect: Authentication bypass via separate admin listener

org.apache.kafka/kafka-streams: org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via memory exhaustion during deserialization

org.apache.kafka/kafka-streams: Kafka Streams: Denial of Service via integer overflow in timestamp calculation

org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via uncontrolled memory allocation in flexible request headers

org.apache.kafka/kafka-clients: Apache kafka: Denial of Service via excessive memory allocation during request parsing

org.apache.kafka/kafka-clients: Apache Kafka: Denial of Service via unbounded telemetry payload decompression

org.apache.kafka/kafka-clients: Apache Kafka: Authentication bypass via missing JWT signature verification

kafka: kafka: Denial of Service via crafted FetchSnapshot request