Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_self-organizing_swarm_plug-in_modules_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Self Organizing Swarm Plug In Modules Plugin (74abb39e-db34-5cf9-af6c-0f84e69547eb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2192 vulnerable 2026-06-08 05:24:59.063858 Details available
A cross-site request forgery vulnerability in Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier allows attackers to add or remove agent labels.
Published: 2020-06-03T12:40:23.000Z
Updated: 2024-08-04T07:01:40.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2191 vulnerable 2026-06-08 05:24:59.062812 Details available
Jenkins Self-Organizing Swarm Plug-in Modules Plugin 3.20 and earlier does not check permissions on API endpoints that allow adding and removing agent labels.
Published: 2020-06-03T12:40:23.000Z
Updated: 2024-08-04T07:01:41.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10309 vulnerable 2026-06-08 05:12:23.142762 Details available
Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients.
Published: 2019-04-30T12:25:17.000Z
Updated: 2024-08-04T22:17:20.298Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.