jenkins github pull request builder vulnerabilities

Latest jenkins github pull request builder CVEs

Newest publication first

1. CVE-2018-1000186 Jenkins GitHub Pull Request Builder Plugin credential capture vulnerability

   Published 2018-06-05

   Medium·CVSS 6.5

   A exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin 1.41.0 and older in GhprbGitHubAuth.java that allows attackers with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials IDs obtained...

2. CVE-2018-1000142 Jenkins GitHub Pull Request Builder Plugin allows attacker with local file system access to obtain GitHub credentials

   Published 2018-04-05

   High·CVSS 7.8 EPSS 0.37%

   An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

3. CVE-2018-1000143 Jenkins GitHub Pull Request Builder Plugin

   Published 2018-04-05

   Medium·CVSS 6.7 EPSS 0.36%

   An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system access to obtain GitHub credentials.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.