Skip to content

Jenkins Repo vulnerabilities

jenkins redpen - pipeline reporter for jira, jenkins project redpen - pipeline reporter for jira plugin +1 moreJenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerabilityCVE-2025-676434.3 MediumDecember 10, 2025
jenkins report info, jenkins project report info plugin +1 moreJenkins Report Info Plugin Path Traversal vulnerabilityCVE-2024-52734.3 MediumMay 24, 2024
jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server PluginCVE-2023-351445.4 MediumJune 14, 2023
jenkins maven repository server, jenkins project maven repository server plugin +1 moreStored XSS vulnerability in Jenkins Maven Repository Server PluginCVE-2023-351435.4 MediumJune 14, 2023
jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin missing permissions checkCVE-2023-305266.5 MediumApril 12, 2023
jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-305258.8 HighApril 12, 2023
jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin configuration form does not mask tokensCVE-2023-305244.3 MediumApril 12, 2023
jenkins report portal, jenkins project report portal plugin +1 moreJenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controllerCVE-2023-305234.3 MediumApril 12, 2023
jenkins repo, jenkins project repo plugin +1 moreXXE vulnerability in Jenkins REPO PluginCVE-2022-43415Fix available7.5 HighOctober 19, 2022
jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreMissing hostname validation in Jenkins View26 Test-Reporting PluginCVE-2022-412448.1 HighSeptember 21, 2022
jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin does not perform a permission check in a method implementing form validationCVE-2022-369044.3 MediumJuly 27, 2022
jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin allows attackers with Overall/Read permission to enumerate credentials IDsCVE-2022-369034.3 MediumJuly 27, 2022
jenkins repository connector, jenkins project repository connector plugin +1 moreCross-site Scripting in Jenkins Repository Connector PluginCVE-2022-341955.4 MediumJune 22, 2022
jenkins repo, jenkins project repo plugin +1 morePath traversal in Jenkins REPO PluginCVE-2022-30949Fix available5.3 MediumMay 17, 2022
jenkins jiratestresultreporter, jenkins project jiratestresultreporter plugin +1 moreMissing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28137Fix available4.3 MediumMarch 29, 2022
jenkins jiratestresultreporter, jenkins project jiratestresultreporter plugin +1 moreCSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter PluginCVE-2022-28136Fix available8.8 HighMarch 29, 2022
jenkins selenium html report, jenkins project selenium html report plugin +1 moreXXE vulnerability in Jenkins Selenium HTML report PluginCVE-2021-21672Fix availableEPSS 42.5%4.3 MediumJune 30, 2021
jenkins artifact repository parameter, jenkins project artifact repository parameter plugin +1 moreStored XSS vulnerability in Jenkins Artifact Repository Parameter PluginCVE-2021-21622Fix available5.4 MediumFebruary 24, 2021
jenkins repository connector, jenkins project repository connector plugin +1 moreStored XSS vulnerability in Jenkins Repository Connector PluginCVE-2021-21618Fix availableEPSS 79.5%5.4 MediumFebruary 24, 2021
jenkins locked files report, jenkins project locked files report plugin +1 moreStored XSS vulnerability in Locked Files Report PluginCVE-2020-22715.4 MediumSeptember 16, 2020
jenkins github coverage reporter, jenkins project github coverage reporter plugin +1 moreSecret stored in plain text by Jenkins GitHub Coverage Reporter PluginCVE-2020-22124.3 MediumJuly 2, 2020
jenkins repository connector, jenkins project repository connector plugin +1 moreCredentials transmitted in plain text by Repository Connector PluginCVE-2020-2149Fix available5.3 MediumMarch 9, 2020
jenkins view26 test-reporting, jenkins project view26 test-reporting plugin +1 moreJenkins View26 Test-Reporting Plugin stores access token in plain textCVE-2019-104524.3 MediumOctober 16, 2019
jenkins repository connector, jenkins project repository connector plugin +1 moreJenkins Repository Connector Plugin has insufficiently protected credentialsCVE-2019-1003038Fix available7.8 HighMarch 8, 2019