Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins:m2release:*:*:*:*:*:jenkins:*:*
part: a version: * update: *
| Vendor | Jenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744) |
|---|---|
| Product | M2Release (694898cc-7d88-5632-8dbb-b00afffe8e36) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jenkins |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-10361 |
vulnerable | 2026-06-08 05:12:23.215738 |
Details available
Jenkins Maven Release Plugin 0.14.0 and earlier stored credentials unencrypted on the Jenkins master where they could be viewed by users with access to the master file system.
Published: 2019-07-31T12:45:21.000Z
Updated: 2024-08-04T22:17:20.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10359 |
vulnerable | 2026-06-08 05:12:23.213954 |
Details available
A cross-site request forgery vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier in the M2ReleaseAction#doSubmit method allowed attackers to perform releases with attacker-specified options.
Published: 2019-07-31T12:45:21.000Z
Updated: 2024-08-04T22:17:20.367Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.