Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins_project:jenkins_lucene-search_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJenkins Project (860cd631-1316-551d-89a3-5aa9a0d4f462)
ProductJenkins Lucene Search Plugin (0f47c9b5-c828-5aff-852d-399b3e9042cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30529 vulnerable 2026-06-08 06:04:39.718228 Details available
Jenkins Lucene-Search Plugin 387.v938a_ecb_f7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database.
Published: 2023-04-12T17:05:17.194Z
Updated: 2025-02-07T18:16:36.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36922 vulnerable 2026-06-08 05:46:08.024181 Details available
Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not escape the search query parameter displayed on the 'search' result page, resulting in a reflected cross-site scripting (XSS) vulnerability.
Published: 2022-07-27T14:29:29.000Z
Updated: 2024-08-03T10:14:29.456Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36910 vulnerable 2026-06-08 05:46:08.009644 Details available
Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them.
Published: 2022-07-27T14:26:54.000Z
Updated: 2024-08-03T10:14:29.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.