GCVE - cpe:2.3:a:jenkins:code_dx:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:code_dx:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Code Dx (`aa6b6258-9a6a-5748-9305-908f7e6a5812`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/jenkinsci/codedx-plugin`	purl2cpe	2026-06-01 10:14:16.741530

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-2633`	vulnerable	2026-06-08 06:02:42.675103	API keys stored and displayed in plain text by Code Dx Plugin MEDIUM (4.3) Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to observe and capture them. Published: 2023-05-16T17:56:40.703Z Updated: 2025-01-22T20:34:19.745Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2632`	vulnerable	2026-06-08 06:02:42.674750	API keys stored and displayed in plain text by Code Dx Plugin MEDIUM (4.3) Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system. Published: 2023-05-16T17:54:11.737Z Updated: 2025-01-22T20:34:38.913Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3146	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2631`	vulnerable	2026-06-08 06:02:42.674117	CSRF vulnerability and missing permission checks in Code Dx Plugin MEDIUM (4.3) A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL. Published: 2023-05-16T18:06:59.001Z Updated: 2025-01-22T20:33:38.273Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3118	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2196`	vulnerable	2026-06-08 06:02:41.600795	Missing permission checks in Code Dx Plugin MEDIUM (4.3) A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an attacker-specified file path on an agent file system. Published: 2023-05-16T17:46:59.742Z Updated: 2025-01-22T20:35:00.678Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3145	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2195`	vulnerable	2026-06-08 06:02:41.600319	CSRF vulnerability and missing permission checks in Code Dx Plugin MEDIUM (4.3) A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL. Published: 2023-05-16T18:02:33.898Z Updated: 2025-01-22T20:34:01.402Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3118	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.