com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2025-67637 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.xebialabs.ci:xlrelease-plugin (7.5.6) potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (2.3.7)

org.jenkins-ci.plugins:credentials MAVEN version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - com.xebialabs.ci:xlrelease-plugin 7.5.6 Source cves: CVE-2024-47805 Source advisory:...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2023-39151 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2023-27903 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

Missing permission checks in xlrelease-plugin allow enumerating credentials IDs

xlrelease-plugin 22.0.0 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials using another...

CSRF vulnerability and missing permission checks in xlrelease-plugin allow capturing credentials

xlrelease-plugin 22.0.0 and earlier does not perform permission checks in methods implementing form validation. This allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attacker-specified credentials IDs obtained through another method, capturing...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2019-10406 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2019-10403 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2019-10405 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2021-21690 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2021-21697 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

biz.neustar.jenkins.plugins:packer (>=1.0, <=1.2), br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.0.1, <=0.0.3) +65 more potentially affected by CVE-2021-21670 via org.jenkins-ci.main:jenkins-core (1.509.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.0, =0.0.1, =1.0.0, =1.0.0, =1.0, =1.0, =0.1, =2.2.1,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2021-21670 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2021-21611 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2021-21602 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...