Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_dbcharts_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Dbcharts Plugin (790716b4-0892-5f8e-8936-5e9a5086c241)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27216 vulnerable 2026-06-08 05:41:55.012178 Details available
Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
Published: 2022-03-15T16:46:08.000Z
Updated: 2024-08-03T05:25:32.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25206 vulnerable 2026-06-08 05:41:45.536895 Details available
A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified database via JDBC using attacker-specified credentials.
Published: 2022-02-15T16:11:42.000Z
Updated: 2024-08-03T04:36:06.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25205 vulnerable 2026-06-08 05:41:45.535795 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-specified database via JDBC using attacker-specified credentials and to determine if a class is available in the Jenkins instance.
Published: 2022-02-15T16:11:41.000Z
Updated: 2024-08-03T04:36:06.646Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.