Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_mask_passwords_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Mask Passwords Plugin (f58a06a9-cfa5-5eec-9504-4425158df553)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29043 vulnerable 2026-06-08 05:42:46.358438 Details available
Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Published: 2022-04-12T19:50:39.000Z
Updated: 2024-08-03T06:10:58.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10370 vulnerable 2026-06-08 05:12:23.226807 Details available
Jenkins Mask Passwords Plugin 2.12.0 and earlier transmits globally configured passwords in plain text as part of the configuration form, potentially resulting in their exposure.
Published: 2019-08-07T14:20:23.000Z
Updated: 2024-08-04T22:17:20.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.