GCVE - cpe:2.3:a:jenkins:repository_connector:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:repository_connector:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Repository Connector (`6cc48354-41c1-5dcb-ad72-65a8c0ef20e1`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36904`	vulnerable	2026-06-08 05:46:08.002683	Details available Jenkins Repository Connector Plugin 2.2.0 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system. Published: 2022-07-27T14:25:41.000Z Updated: 2024-08-03T10:14:29.354Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20%282%29 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36903`	vulnerable	2026-06-08 05:46:08.002273	Details available A missing permission check in Jenkins Repository Connector Plugin 2.2.0 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2022-07-27T14:25:27.000Z Updated: 2024-08-03T10:14:29.471Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-2665%20%281%29 http://www.openwall.com/lists/oss-security/2022/07/27/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34195`	vulnerable	2026-06-08 05:44:52.401587	Details available Jenkins Repository Connector Plugin 2.2.0 and earlier does not escape the name and description of Maven Repository Artifact parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Published: 2022-06-22T14:41:29.000Z Updated: 2024-08-03T08:16:17.285Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-22/#SECURITY-2784	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-21618`	vulnerable	2026-06-08 05:29:13.033657	Details available Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission. Published: 2021-02-24T15:05:28.000Z Updated: 2024-08-03T18:16:23.809Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2149`	vulnerable	2026-06-08 05:24:58.991569	Details available Jenkins Repository Connector Plugin 1.2.6 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure. Published: 2020-03-09T15:01:02.000Z Updated: 2024-08-04T07:01:40.631Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-03-09/#SECURITY-1520 http://www.openwall.com/lists/oss-security/2020/03/09/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-1003038`	vulnerable	2026-06-08 05:12:21.450044	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.