Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_warnings_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Warnings Plugin (8824455a-abb9-5862-ae59-441778e97333)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46651 not_vulnerable 2026-06-08 06:12:45.459620 Details available
Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. This fix has been backported to 10.4.1.
Published: 2023-10-25T13:45:53.679Z
Updated: 2024-09-17T13:41:48.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2280 vulnerable 2026-06-08 05:24:59.213050 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Warnings Plugin 5.0.1 and earlier allows attackers to execute arbitrary code.
Published: 2020-09-23T13:10:18.000Z
Updated: 2024-08-04T07:01:41.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1003007 vulnerable 2026-06-08 05:12:21.394767 Details available
A cross-site request forgery vulnerability exists in Jenkins Warnings Plugin 5.0.0 and earlier in src/main/java/hudson/plugins/warnings/GroovyParser.java that allows attackers to execute arbitrary code via a form validation HTTP endpoint.
Published: 2019-02-06T16:00:00.000Z
Updated: 2024-09-17T03:08:27.801Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.