Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:start_windocks_container:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductStart Windocks Container (9e22f487-0e46-5fee-886e-5ffddc4cc08e)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jenkinsci/windocks-start-container-plugin purl2cpe 2026-06-01 10:14:15.705907

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64139 vulnerable 2026-06-08 07:39:18.062536 Details available
A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
Published: 2025-10-29T13:29:45.114Z
Updated: 2025-11-04T21:14:33.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64138 vulnerable 2026-06-08 07:39:18.057520 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL.
Published: 2025-10-29T13:29:44.349Z
Updated: 2025-11-04T21:14:31.752Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.