Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade jenkins | Aug 22, 2024 | Jan 13, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 13, 2021 |
| Jenkins 2021 01 13 | — | Upgrade Jenkins LTS to the latest versionUpgrade Jenkins LTS to version 2.263.2Upgrade Jenkins to the latest versionUpgrade Jenkins to version 2.275 | Dec 2, 2021 | Jan 13, 2021 |
| Redhat Openshift | — | Upgrade python-stevedoreUpgrade python-ironic-libUpgrade podmanUpgrade python-pyrsistentUpgrade rteval-loadsUpgrade python-toozUpgrade ignitionUpgrade redhat-release-coreosUpgrade python-hardwareUpgrade python-sushy-oem-idracUpgrade cri-oUpgrade conmonUpgrade cri-toolsUpgrade python-oslo-serializationUpgrade toolboxUpgrade jenkins-2-pluginsUpgrade butaneUpgrade ostreeUpgrade python-oslo-utilsUpgrade python-keystoneauth1Upgrade coreos-installerUpgrade python-debtcollectorUpgrade python-openshiftUpgrade python-eventletUpgrade python-kubernetesUpgrade python-ironic-prometheus-exporterUpgrade openshiftUpgrade openvswitch2.15Upgrade jenkinsUpgrade python-openstacksdkUpgrade python-jsonschemaUpgrade openstack-ironic-inspectorUpgrade haproxyUpgrade ironic-images-ipa-x86_64Upgrade python-oslo-configUpgrade ovn2.13Upgrade atomic-openshift-service-idlerUpgrade rust-afterburnUpgrade python-oslo-logUpgrade openstack-ironic-python-agent | Feb 19, 2021 | Jan 13, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub