GCVE - cpe:2.3:a:jenkins:cons3rt:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:cons3rt:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Cons3Rt (`b987f141-1d93-56f8-851e-a912c63f6709`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-41255`	vulnerable	2026-06-08 05:48:30.078617	Details available Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system. Published: 2022-09-21T15:46:12.000Z Updated: 2025-05-28T14:08:30.885Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2759 http://www.openwall.com/lists/oss-security/2022/09/21/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41254`	vulnerable	2026-06-08 05:48:30.078201	Details available Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2022-09-21T15:46:11.000Z Updated: 2025-05-28T14:11:19.339Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2751 http://www.openwall.com/lists/oss-security/2022/09/21/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41253`	vulnerable	2026-06-08 05:48:30.077707	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2022-09-21T15:46:10.000Z Updated: 2025-05-28T14:14:58.153Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2751 http://www.openwall.com/lists/oss-security/2022/09/21/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41252`	vulnerable	2026-06-08 05:48:30.076929	Details available Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins. Published: 2022-09-21T15:46:09.000Z Updated: 2025-05-28T14:16:45.877Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2022-09-21/#SECURITY-2752 http://www.openwall.com/lists/oss-security/2022/09/21/5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.