Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_repo_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Repo Plugin (7750f0fb-89ad-58b8-bd4d-1339ba775493)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-43415 vulnerable 2026-06-08 05:49:31.808330 Details available
Jenkins REPO Plugin 1.15.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published: 2022-10-19T00:00:00.000Z
Updated: 2025-05-09T13:44:54.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30949 vulnerable 2026-06-08 05:43:39.868451 Details available
Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs, obtaining limited information about other projects' SCM contents.
Published: 2022-05-17T14:06:09.000Z
Updated: 2024-08-03T07:03:39.748Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.