Jenkins Credentials vulnerabilities

• jenkins credentials binding, jenkins project credentials binding plugin +1 more Jenkins Credentials Binding Plugin does not properly sanitize file names for file and zip file credentials CVE-2026-48922 Fix available 7.5 HighMay 27, 2026
• jenkins credentials binding, jenkins project credentials binding plugin +1 more Jenkins Credentials Binding Plugin has a path traversal vulnerability CVE-2026-42520 Fix available 7.5 HighApril 29, 2026
• jenkins credentials binding, jenkins project credentials binding plugin +1 more Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages CVE-2025-53650 Fix available 7.3 HighJuly 9, 2025
• jenkins credentials, jenkins project credentials plugin +1 more Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission CVE-2024-47805 Fix available 7.5 HighOctober 2, 2024
• jenkins plain credentials, jenkins project plain credentials plugin +1 more Secret file credentials stored unencrypted in rare cases by Plain Credentials Plugin CVE-2024-39459 Fix available 4.3 MediumJune 26, 2024
• jenkins azure credentials, jenkins project azure credentials plugin +1 more Missing Authorization in Jenkins Azure Credentials Plugin CVE-2023-25768 Fix available 6.5 MediumFebruary 15, 2023
• jenkins azure credentials, jenkins project azure credentials plugin +1 more Cross-Site Request Forgery in Jenkins Azure Credentials Plugin CVE-2023-25767 Fix available 8.8 HighFebruary 15, 2023
• jenkins azure credentials, jenkins project azure credentials plugin +1 more Missing Authorization in Jenkins Azure Credentials Plugin CVE-2023-25766 Fix available 4.3 MediumFebruary 15, 2023
• jenkins kubernetes credentials provider, jenkins project kubernetes credentials provider plugin +1 more Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin CVE-2023-24425 Fix available 6.5 MediumJanuary 24, 2023
• jenkins credentials, jenkins project credentials plugin +1 more Cross-site Scripting in Jenkins Credentials Plugin CVE-2022-29036 Fix available EPSS 71.9% 5.4 MediumApril 12, 2022
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more Missing permission checks in AWS Credentials Plugin CVE-2022-27199 Fix available 4.3 MediumMarch 15, 2022
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin CVE-2022-27198 8.0 HighMarch 15, 2022
• jenkins credentials binding, jenkins project credentials binding plugin +1 more Incorrect Permission Assignment for Critical Resource in Jenkins Credentials Binding Plugin CVE-2022-20616 Fix available 4.3 MediumJanuary 12, 2022
• jenkins credentials, jenkins project credentials plugin +1 more Cross-Site Request Forgery in Jenkins Credentials Plugin CVE-2021-21648 Fix available EPSS 11.3% 6.1 MediumMay 11, 2021
• jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 more Missing permission checks in Jenkins CloudBees AWS Credentials Plugin allows enumerating credentials IDs CVE-2021-21625 Fix available 4.3 MediumMarch 18, 2021
• jenkins credentials binding, jenkins project credentials binding plugin +1 more Improper masking of some secrets in Jenkins Credentials Binding Plugin CVE-2020-2182 Fix available 4.3 MediumMay 6, 2020
• jenkins credentials binding, jenkins project credentials binding plugin +1 more Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps CVE-2020-2181 Fix available 6.5 MediumMay 6, 2020
• jenkins google oauth credentials, jenkins project google oauth credentials plugin +1 more Improper Limitation of a Pathname to a Restricted Directory in Jenkins Google OAuth Credentials Plugin CVE-2019-10436 Fix available 6.5 MediumOctober 16, 2019
• jenkins credentials binding, jenkins credentials binding plugin jenkins +1 more Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format CVE-2019-1010241 6.5 MediumJuly 19, 2019
• jenkins credentials, jenkins project credentials plugin +1 more Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin CVE-2019-10320 Fix available 4.3 MediumMay 21, 2019
• jenkins azure publishersettings credentials, jenkins project azure publishersettings credentials plugin +1 more Jenkins Azure PublisherSettings Credentials Plugin stored credentials in plain text CVE-2019-10303 Fix available 8.8 HighApril 18, 2019
• jenkins ssh credentials Exposure of Sensitive Information to an Unauthorized Actor in Jenkins SSH Credentials Plugin CVE-2018-1000601 Fix available 6.5 MediumJune 26, 2018
• jenkins credentials binding Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials CVE-2018-1000057 Fix available 4.3 MediumFebruary 9, 2018