Jenkins Maven vulnerabilities

• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more Improper masking of credentials in Jenkins Pipeline Maven Integration Plugin CVE-2023-41934 Fix available 5.3 MediumSeptember 6, 2023
• jenkins project maven artifact choicelistprovider (nexus) plugin, jenkins maven artifact choicelistprovider \(nexus\) +1 more Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials CVE-2023-40347 6.5 MediumAugust 16, 2023
• jenkins maven repository server, jenkins project maven repository server plugin +1 more Stored XSS vulnerability in Jenkins Maven Repository Server Plugin CVE-2023-35144 5.4 MediumJune 14, 2023
• jenkins maven repository server, jenkins project maven repository server plugin +1 more Stored XSS vulnerability in Jenkins Maven Repository Server Plugin CVE-2023-35143 5.4 MediumJune 14, 2023
• jenkins maven metadata, jenkins project maven metadata plugin for jenkins ci server plugin +1 more Stored XSS vulnerability in Jenkins Maven Metadata Plugin for Jenkins CI server plugin CVE-2022-36905 5.4 MediumJuly 27, 2022
• jenkins maven metadata, jenkins project maven metadata plugin for jenkins ci server plugin +1 more Cross-site Scripting in Jenkins Maven Metadata Plugin CVE-2022-34190 5.4 MediumJune 22, 2022
• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more Stored XSS vulnerability in Pipeline Maven Integration Plugin via unescaped display name CVE-2020-2256 Fix available 5.4 MediumSeptember 16, 2020
• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentials CVE-2020-2235 Fix available 6.5 MediumAugust 12, 2020
• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentials CVE-2020-2234 Fix available 6.5 MediumAugust 12, 2020
• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDs CVE-2020-2233 Fix available 6.5 MediumAugust 12, 2020
• jenkins maven, jenkins project maven release plugin +1 more Cross-site request forgery (CSRF) vulnerability in Jenkins Maven Release Plugin CVE-2019-16550 Fix available 8.8 HighDecember 17, 2019
• jenkins maven, jenkins project maven release plugin +1 more Jenkins Maven Release Plug-in Plugin XXE vulnerability CVE-2019-16549 Fix available 8.1 HighDecember 17, 2019
• jenkins maven, jenkins project maven integration plugin +1 more Maven Integration Plugin did not mask sensitive values in module build logs CVE-2019-10358 Fix available 6.5 MediumJuly 31, 2019
• jenkins pipeline maven integration, jenkins project pipeline maven integration plugin +1 more XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin CVE-2019-10327 Fix available 8.1 HighMay 31, 2019
• jenkins maven artifact choicelistprovider \(nexus\) Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin CSRF vulnerability and missing permission checks CVE-2018-1999030 Fix available 5.4 MediumAugust 1, 2018
• jenkins maven MitM on Jenkins Maven Plugin CVE-2017-1000397 Fix available 5.9 MediumJanuary 26, 2018