CVE-2025-64138

A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...

EUVD-2025-36660

Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery...

Jenkins Start Windocks Containers Plugin vulnerable to cross-site request forgery

Jenkins Start Windocks Containers Plugin 1.4 and earlier does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to connect to an attacker-specified URL. Additionally, this endpoint does not require POST requests, resulting in a cross-site reque...

EUVD-2025-36659

Jenkins Start Windocks Containers Plugin is missing a permission check...

CVE-2025-64139

A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2025-64139

A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

CVE-2025-64138

A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...

CVE-2025-64139

The Jenkins Start Windocks Containers Plugin (version 1.4 and earlier ) is vulnerable to a missing permission check in an HTTP endpoint. This allows attackers with Overall/Read permissions to force the application to connect to an attacker-specified URL. Additionally, because the endpoint does no...

CVE-2025-64138

The Jenkins Start Windocks Containers Plugin (version 1.4 and earlier) is vulnerable to a cross-site request forgery (CSRF) . The root cause is a failure to perform permission checks on an HTTP endpoint, which also lacks a requirement for POST requests. This flaw allows attackers with Overall/Rea...

CVE-2025-64139: Missing Authorization

A missing permission check in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

PT-2025-44287

Name of the Vulnerable Software and Affected Versions Jenkins Start Windocks Containers Plugin versions 1.4 and earlier Description A cross-site request forgery CSRF issue exists in the Jenkins Start Windocks Containers Plugin. This flaw allows attackers to force connections to a URL chosen by th...

CVE-2025-64138: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability in Jenkins Start Windocks Containers Plugin 1.4 and earlier allows attackers to connect to an attacker-specified URL...