CVE-2019-10354

—

CVSS 3.1

4.3 medium

EPSS

2%p75

Published

Jul 17, 2019 (Jul 17, 2019)

Modified

Jun 17, 2026

Description

A vulnerability in the Stapler web framework used in Jenkins 2.185 and earlier, LTS 2.176.1 and earlier allowed attackers to access view fragments directly, bypassing permission checks and possibly obtain sensitive information.

Vendors: jenkins redhat
Products: jenkins, openshift container platform
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.