Github Pull Request Builder
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:github_pull_request_builder:*:*:*:*:*:jenkins:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | Github Pull Request Builder (c9c4ee14-d6e5-50c3-819a-10f99a989695) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jenkins |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jenkinsci/ghprb-plugin |
purl2cpe | 2026-06-01 10:14:10.774208 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-24436 |
vulnerable | 2026-06-08 05:56:05.459998 |
Details available
A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T13:59:55.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24435 |
vulnerable | 2026-06-08 05:56:05.459459 |
Details available
A missing permission check in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T13:59:08.099Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24434 |
vulnerable | 2026-06-08 05:56:05.458995 |
Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Pull Request Builder Plugin 1.42.2 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2023-01-24T00:00:00.000Z
Updated: 2025-04-02T14:00:41.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000186 |
vulnerable | 2026-06-08 05:10:25.613948 |
Details available
A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Published: 2018-06-05T20:00:00.000Z
Updated: 2024-09-16T22:36:38.384Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000143 |
vulnerable | 2026-06-08 05:10:25.528023 |
Details available
An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.
Published: 2018-04-05T13:00:00.000Z
Updated: 2024-09-16T19:40:27.564Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000142 |
vulnerable | 2026-06-08 05:10:25.527607 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.