com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.xebialabs.ci:xlrelease-plugin (7.5.6) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.3.7)

org.jenkins-ci.plugins:credentials MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.xebialabs.ci:xlrelease-plugin 7.5.6 Source cves: CVE-2024-47805 Source advisory:...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

CSRF vulnerability and missing permission checks in xlrelease-plugin allow capturing credentials

xlrelease-plugin 22.0.0 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing...

Missing permission checks in xlrelease-plugin allow enumerating credentials IDs

xlrelease-plugin 22.0.0 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2020-2100 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2020-2103 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2017-1000400 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.blackducksoftware.integration:blackduck-hub (3.1.0), com.inedo.buildmaster:inedo-buildmaster (>=1.0, <=1.3) +58 more potentially affected by CVE-2018-1999002 via org.jenkins-ci.main:jenkins-core (1.596.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.596.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.blackducksoftware.integration:blackduck-hub 3.1.0 - com.inedo.buildmaster:inedo-buildmast...