CVE-2025-30196

The Jenkins AnchorChain Plugin 1.0 is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the lack of validation for URL schemes when the plugin generates links based on workspace content, specifically allowing the javascript: scheme. Attackers who can control the i...

org.jenkins-ci.main:jenkins-test-harness (1.629), org.jenkins-ci.main:jenkins-war (1.629) +1 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.629)

org.jenkins-ci.main:jenkins-core MAVEN version 1.629 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.629 - org.jenkins-ci.main:jenkins-war 1.629 -...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

org.jenkins-ci.main:jenkins-test-harness (1.560), org.jenkins-ci.main:jenkins-war (1.560) +6 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.560)

org.jenkins-ci.main:jenkins-core MAVEN version 1.560 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.560 - org.jenkins-ci.main:jenkins-war 1.560 -...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.621), org.jenkins-ci.main:jenkins-war (1.621) +2 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.621)

org.jenkins-ci.main:jenkins-core MAVEN version 1.621 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.621 - org.jenkins-ci.main:jenkins-war 1.621 -...

net.hurstfrost.jenkins:avatar (>=1.1, <=1.2), org.jenkins-ci.main:jenkins-test-harness (1.434) +11 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.434)

org.jenkins-ci.main:jenkins-core MAVEN version 1.434 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.hurstfrost.jenkins:avatar =1.1, =0.2.0, =0.5, =1.0 - org.jvnet.hudson.plugins:sitemonitor 0...

jenkins.plugins.htmlaudio:html-audio-notifier (>=0.2, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.425) +13 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.425)

org.jenkins-ci.main:jenkins-core MAVEN version 1.425 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins.htmlaudio:html-audio-notifier =0.2, =1.4, =0.11, =1.17, =1.0, =1.5, =1.7 Source...

jenkins.plugins.htmlaudio:html-audio-notifier (>=0.2, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.425) +13 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.425)

org.jenkins-ci.main:jenkins-core MAVEN version 1.425 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugins.htmlaudio:html-audio-notifier =0.2, =1.4, =0.11, =1.17, =1.0, =1.5, =1.7 Source...

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

org.jenkins-ci.main:jenkins-test-harness (1.468), org.jenkins-ci.main:jenkins-war (1.468) +7 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.468)

org.jenkins-ci.main:jenkins-core MAVEN version 1.468 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.468 - org.jenkins-ci.main:jenkins-war 1.468 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2025-27623 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

org.jenkins-ci.main:jenkins-test-harness (1.628), org.jenkins-ci.main:jenkins-war (1.628) +3 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.628)

org.jenkins-ci.main:jenkins-core MAVEN version 1.628 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.628 - org.jenkins-ci.main:jenkins-war 1.628 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

net.praqma:matrix-reloaded (>=1.0.2, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.418) +5 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.418)

org.jenkins-ci.main:jenkins-core MAVEN version 1.418 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:matrix-reloaded =1.0.2, =1.4, =1.5 - org.jenkins-ci.plugins:plugin 1.418 Source cves...

org.jenkins-ci.main:jenkins-test-harness (1.460), org.jenkins-ci.main:jenkins-war (1.460) +10 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.460)

org.jenkins-ci.main:jenkins-core MAVEN version 1.460 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.460 - org.jenkins-ci.main:jenkins-war 1.460 -...

org.jenkins-ci.main:jenkins-test-harness (1.453), org.jenkins-ci.main:jenkins-war (1.453) +3 more potentially affected by CVE-2025-27625 via org.jenkins-ci.main:jenkins-core (1.453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.453 - org.jenkins-ci.main:jenkins-war 1.453 -...