Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_build-metrics_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Build Metrics Plugin (9d375029-bd6b-57e4-a739-3e2a488348a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-34785 vulnerable 2026-06-08 05:46:03.441089 Details available
Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them.
Published: 2022-06-30T17:46:40.000Z
Updated: 2024-08-03T09:22:09.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34784 vulnerable 2026-06-08 05:46:03.439882 Details available
Jenkins build-metrics Plugin 1.3 does not escape the build description on one of its views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Build/Update permission.
Published: 2022-06-30T17:46:33.000Z
Updated: 2024-08-03T09:22:10.288Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10475 vulnerable 2026-06-08 05:12:23.387454 Details available
A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
Published: 2019-10-23T12:45:45.000Z
Updated: 2024-08-04T22:24:18.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.