GCVE - cpe:2.3:a:jenkins:nexus_platform:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:nexus_platform:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Nexus Platform (`dd63b1eb-fb8b-5482-aa8e-d787dfe286e3`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jenkinsci/nexus-platform-plugin`	purl2cpe	2026-06-01 10:14:15.728978

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50769`	vulnerable	2026-06-08 06:16:16.645421	Details available Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-12-13T17:30:16.867Z Updated: 2025-02-13T17:19:34.220Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3203 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50768`	vulnerable	2026-06-08 06:16:16.645000	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-12-13T17:30:16.219Z Updated: 2025-05-22T18:12:21.589Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3203 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50767`	vulnerable	2026-06-08 06:16:16.644595	Details available Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML. Published: 2023-12-13T17:30:15.589Z Updated: 2025-02-13T17:19:33.124Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3204 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50766`	vulnerable	2026-06-08 06:16:16.644060	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML. Published: 2023-12-13T17:30:14.962Z Updated: 2025-02-13T17:19:32.513Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-12-13/#SECURITY-3204 http://www.openwall.com/lists/oss-security/2023/12/13/4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.