Approved changes feed: RSS · Atom

cpe:2.3:a:barchart:maven_cascade_release:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorBarchart (98c0ced1-3248-5154-a10a-46d282372dad)
ProductMaven Cascade Release (aefa70cd-d1c1-50c0-a451-ce4a1d06f950)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2295 vulnerable 2026-06-08 05:24:59.240236 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Maven Cascade Release Plugin 1.3.2 and earlier allows attackers to start cascade builds and layout builds, and reconfigure the plugin.
Published: 2020-10-08T12:40:28.000Z
Updated: 2024-08-04T07:01:41.168Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2294 vulnerable 2026-06-08 05:24:59.239603 Details available
Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin.
Published: 2020-10-08T12:40:28.000Z
Updated: 2024-08-04T07:01:41.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.