⤷ Title: High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 02:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Build Token #CI/CD #Coverage Plugin #CVE_2025_67635 #dos #HTTP CLI #Jenkins #XSS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 11 Dec 2025 02:38:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Build Token #CI/CD #Coverage Plugin #CVE_2025_67635 #dos #HTTP CLI #Jenkins #XSS
Daily CyberSecurity
High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
Jenkins patched nine flaws: a High-severity unauthenticated DoS (CVE-2025-67635) via HTTP CLI and XSS via Coverage Plugin. Build tokens are now encrypted. Update to v2.541 immediately.