com.cloudbees.jenkins.plugins vulnerabilities

Products

• com.cloudbees.jenkins.plugins/kubernetes-credentials-provider 1
• com.cloudbees.jenkins.plugins/xpdev 1

Latest com.cloudbees.jenkins.plugins CVEs

Newest publication first

1. CVE-2023-24425 Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin

   Published 2023-01-24

   Medium·CVSS 6.5 EPSS 0.83%

   Jenkins Kubernetes Credentials Provider Plugin 1.208.v128ee9800c04 and earlier does not set the appropriate context for Kubernetes credentials lookup, allowing attackers with Item/Configure permission to access and potentially capture Kubernetes credentials they are not entitled...

2. CVE-2022-45389 Missing Authorization in Jenkins XP-Dev Plugin

   Published 2022-11-15

   Medium·CVSS 5.3 EPSS 0.74%

   A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.