CVE-2017-1000390

The CVE-2017-1000390 entry concerns the Jenkins Multijob plugin where versions up to 1.25 did not enforce permissions for the Resume Build action. This allowed anyone with Job/Read permission to resume a build, representing a security bypass of build control. Affected component: Jenkins Multijob ...

CVE-2026-9674

The Jenkins Multijob Plugin versions 662.vd2e0001f6b_b_d and earlier are vulnerable to a cross-site request forgery (CSRF) vulnerability. The root cause is that the plugin does not require POST requests for a specific HTTP endpoint. This flaw allows an attacker to perform unauthorized actions by ...