Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_jira_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Jira Plugin (831bd7e4-5dbe-5e41-85ea-f61199ac886d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-49653 vulnerable 2026-06-08 06:14:29.288014 Details available
Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.
Published: 2023-11-29T13:45:10.268Z
Updated: 2025-02-13T17:18:47.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29041 vulnerable 2026-06-08 05:42:46.354457 Details available
Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Published: 2022-04-12T19:50:36.000Z
Updated: 2024-08-03T06:10:58.714Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16541 vulnerable 2026-06-08 05:13:08.550349 Details available
Jenkins JIRA Plugin 3.0.10 and earlier does not declare the correct (folder) scope for per-folder Jira site definitions, allowing users to select and use credentials with System scope.
Published: 2019-11-21T14:11:21.000Z
Updated: 2024-08-05T01:17:40.816Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.