Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_deployment_dashboard_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Deployment Dashboard Plugin (4f9b85bc-b144-50b5-abec-5b4fbe36ca29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50775 vulnerable 2026-06-08 06:16:16.657224 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to copy jobs.
Published: 2023-12-13T17:30:20.742Z
Updated: 2025-02-13T17:19:37.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34799 vulnerable 2026-06-08 05:46:03.459251 Details available
Jenkins Deployment Dashboard Plugin 1.0.10 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
Published: 2022-06-30T17:47:58.000Z
Updated: 2024-08-03T09:22:10.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34798 vulnerable 2026-06-08 05:46:03.458962 Details available
Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.
Published: 2022-06-30T17:47:52.000Z
Updated: 2024-08-03T09:22:09.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34797 vulnerable 2026-06-08 05:46:03.458538 Details available
A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers to connect to an attacker-specified HTTP URL using attacker-specified credentials.
Published: 2022-06-30T17:47:47.000Z
Updated: 2024-08-03T09:22:10.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34796 vulnerable 2026-06-08 05:46:03.458234 Details available
A missing permission check in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Published: 2022-06-30T17:47:42.000Z
Updated: 2024-08-03T09:22:10.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34795 vulnerable 2026-06-08 05:46:03.456936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.