Jenkins Job Configuration History Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:jenkins_project:jenkins_job_configuration_history_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462) |
|---|---|
| Product | Jenkins Job Configuration History Plugin (17aa6f0d-38cb-5c3f-9fa4-06cc919201c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57287 |
vulnerable | 2026-07-29 01:00:29.552668 |
Details available
Jenkins Job Configuration History Plugin 1356.ve360da_6c523a_ and earlier does not redact the encrypted values of secrets when displaying historical job and agent configurations, allowing attackers with Extended Read permission to view encrypted secret values that would otherwise be redacted.
Published: 2026-06-24T13:20:08.138Z
Updated: 2026-06-24T14:12:42.211Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41933 |
vulnerable | 2026-06-08 06:11:07.439770 |
Details available
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
Published: 2023-09-06T12:08:54.329Z
Updated: 2024-09-26T19:57:44.018Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41932 |
vulnerable | 2026-06-08 06:11:07.439330 |
Details available
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpoints, allowing attackers with to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file called 'history.xml'.
Published: 2023-09-06T12:08:53.687Z
Updated: 2024-09-26T19:58:14.787Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41931 |
vulnerable | 2026-06-08 06:11:07.438878 |
Details available
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting (XSS) vulnerability.
Published: 2023-09-06T12:08:53.040Z
Updated: 2024-09-26T19:58:39.502Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41930 |
vulnerable | 2026-06-08 06:11:07.437658 |
Details available
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin.
Published: 2023-09-06T12:08:52.399Z
Updated: 2024-09-26T19:59:09.503Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38664 |
vulnerable | 2026-06-08 05:47:16.789878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36887 |
vulnerable | 2026-06-08 05:46:07.971959 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.