Product

com.cloudbees.jenkins.plugins/xpdev vulnerabilities

1 published CVE affecting com.cloudbees.jenkins.plugins/xpdev, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest com.cloudbees.jenkins.plugins/xpdev CVEs

Newest publication first

CVE-2022-45389 Missing Authorization in Jenkins XP-Dev Plugin
Published 2022-11-15

MediumCVSS 5.3 EPSS 0.74%

A missing permission check in Jenkins XP-Dev Plugin 1.0 and earlier allows unauthenticated attackers to trigger builds of jobs corresponding to an attacker-specified repository.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

com.cloudbees.jenkins.plugins/xpdev vulnerabilities

Latest com.cloudbees.jenkins.plugins/xpdev CVEs

CVE-2022-45389 Missing Authorization in Jenkins XP-Dev Plugin