Threats tagged 'ghsa-xh58-qv89-v6gq'

Jenkins versions 2.587 and earlier, including LTS 2.580.1 and earlier, have a vulnerability where the restriction on deserializing certain nested configuration objects is not consistently enforced. This flaw allows attackers to bypass root element checks and potentially inject nested objects into the configuration.