Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_relution_enterprise_appstore_publisher_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Relution Enterprise Appstore Publisher Plugin (bacfb534-fd1a-55f2-ae4d-42bb32171192)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10389 vulnerable 2026-06-08 05:12:23.254411 Details available
A missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
Published: 2019-08-07T14:20:25.000Z
Updated: 2024-08-04T22:17:20.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10388 vulnerable 2026-06-08 05:12:23.254089 Details available
A cross-site request forgery vulnerability in Jenkins Relution Enterprise Appstore Publisher Plugin 1.24 and earlier allows attackers to have Jenkins initiate an HTTP connection to an attacker-specified server.
Published: 2019-08-07T14:20:25.000Z
Updated: 2024-08-04T22:17:20.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10281 vulnerable 2026-06-08 05:12:23.095421 Details available
Jenkins Relution Enterprise Appstore Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
Published: 2019-04-04T15:38:49.000Z
Updated: 2024-08-04T22:17:20.161Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.