GCVE - cpe:2.3:a:jenkins:project_inheritance:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:project_inheritance:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Project Inheritance (`d56e92c0-964f-5c65-8ebe-219772a93bed`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34787`	vulnerable	2026-06-08 05:46:03.446118	Details available Jenkins Project Inheritance Plugin 21.04.03 and earlier does not escape the reason a build is blocked in tooltips, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control the reason a queue item is blocked. Published: 2022-06-30T17:46:51.000Z Updated: 2024-08-03T09:22:10.430Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-06-30/#SECURITY-1919	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2198`	vulnerable	2026-06-08 05:24:59.073611	Details available Jenkins Project Inheritance Plugin 19.08.02 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure. Published: 2020-06-03T12:40:26.000Z Updated: 2024-08-04T07:01:41.160Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1582 http://www.openwall.com/lists/oss-security/2020/06/03/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2197`	vulnerable	2026-06-08 05:24:59.073083	Details available Jenkins Project Inheritance Plugin 19.08.02 and earlier does not require users to have Job/ExtendedRead permission to access Inheritance Project job configurations in XML format. Published: 2020-06-03T12:40:26.000Z Updated: 2024-08-04T07:01:41.113Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2020-06-03/#SECURITY-1582 http://www.openwall.com/lists/oss-security/2020/06/03/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10409`	vulnerable	2026-06-08 05:12:23.276249	Details available A missing permission check in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers with Overall/Read permission to trigger project generation from templates. Published: 2019-09-25T15:05:32.000Z Updated: 2024-08-04T22:24:17.762Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401 http://www.openwall.com/lists/oss-security/2019/09/25/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10408`	vulnerable	2026-06-08 05:12:23.275783	Details available A cross-site request forgery vulnerability in Jenkins Project Inheritance Plugin 2.0.0 and earlier allowed attackers to trigger project generation from templates. Published: 2019-09-25T15:05:32.000Z Updated: 2024-08-04T22:24:16.960Z Open on db.gcve.eu Reference links https://jenkins.io/security/advisory/2019-09-25/#SECURITY-401 http://www.openwall.com/lists/oss-security/2019/09/25/3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10407`	vulnerable	2026-06-08 05:12:23.275361	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.