<p>Upgrade <code>org.jenkins-ci.main:jenkins-core</code> to versions 2.32.2, 2.44 or higher.</p>

Information Exposure Affecting org.jenkins-ci.main:jenkins-core package, versions [,2.32.2) [2.40,2.44)

Snyk CVSS

Attack Complexity Low

Threat Intelligence

EPSS 0.07% (30^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-JAVA-ORGJENKINSCIMAIN-32302
published 23 May 2018
disclosed 1 Feb 2017
credit Daniel Beck

Report a new vulnerability Found a mistake?

Introduced: 1 Feb 2017

CVE-2017-2609 Open this link in a new tab CWE-200 Open this link in a new tab

How to fix?

Upgrade org.jenkins-ci.main:jenkins-core to versions 2.32.2, 2.44 or higher.

Overview

org.jenkins-ci.main:jenkins-core is an open-source automation server.

Affected versions of this package are vulnerable to Information Exposure via search suggestions. The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.