Threats tagged 'ghsa-h93r-r52j-vf7v'

Jenkins versions 2.587 and earlier, including LTS 2.580.1 and earlier, contain a vulnerability that allows attackers with Overall/Read permission to trigger warnings in the "Manage Old Data" feature. These warnings can be exploited by administrators to inject attacker-controlled data, potentially overriding existing user account information such as login passwords.