GCVE - cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:report_portal:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Report Portal (`1b22bf67-fcd1-5935-ab39-f1e1e3e8ab04`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/reportportal/plugin-jenkins`	purl2cpe	2026-06-01 10:14:09.284279

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30526`	vulnerable	2026-06-08 06:04:39.713038	Details available A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified bearer token authentication. Published: 2023-04-12T17:05:14.987Z Updated: 2025-02-07T16:54:29.794Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950 http://www.openwall.com/lists/oss-security/2023/04/13/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30525`	vulnerable	2026-06-08 06:04:39.712545	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified bearer token authentication. Published: 2023-04-12T17:05:14.297Z Updated: 2025-02-07T16:04:51.819Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2950 http://www.openwall.com/lists/oss-security/2023/04/13/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30524`	vulnerable	2026-06-08 06:04:39.711965	Details available Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and capture them. Published: 2023-04-12T17:05:13.591Z Updated: 2025-02-07T16:57:04.169Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945 http://www.openwall.com/lists/oss-security/2023/04/13/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30523`	vulnerable	2026-06-08 06:04:39.711522	Details available Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Published: 2023-04-12T17:05:12.873Z Updated: 2025-02-07T16:58:41.462Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-2945 http://www.openwall.com/lists/oss-security/2023/04/13/3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.