Jenkins Pipeline Maven Integration Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_pipeline_maven_integration_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Pipeline Maven Integration Plugin (08a219cf-bdf0-5942-9867-e3806b2b515e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41934 |
vulnerable | 2026-06-08 06:11:07.442196 |
Details available
Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of credentials specified in custom Maven settings in Pipeline build logs if "Treat username as secret" is checked.
Published: 2023-09-06T12:08:55.028Z
Updated: 2024-09-26T19:57:19.685Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2256 |
vulnerable | 2026-06-08 05:24:59.173811 |
Details available
Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Published: 2020-09-16T13:20:40.000Z
Updated: 2024-08-04T07:01:41.290Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2235 |
vulnerable | 2026-06-08 05:24:59.133494 |
Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows attackers to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
Published: 2020-08-12T13:25:24.000Z
Updated: 2024-08-04T07:01:41.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2234 |
vulnerable | 2026-06-08 05:24:59.132932 |
Details available
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to connect to an attacker-specified JDBC URL using attacker-specified credentials IDs obtained through another method, potentially capturing credentials stored in Jenkins.
Published: 2020-08-12T13:25:23.000Z
Updated: 2024-08-04T07:01:41.133Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2233 |
vulnerable | 2026-06-08 05:24:59.131728 |
Details available
A missing permission check in Jenkins Pipeline Maven Integration Plugin 3.8.2 and earlier allows users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins.
Published: 2020-08-12T13:25:23.000Z
Updated: 2024-08-04T07:01:41.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10327 |
vulnerable | 2026-06-08 05:12:23.168597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.