org.jenkins-ci.plugins/http_request vulnerabilities

Latest org.jenkins-ci.plugins/http_request CVEs

Newest publication first

1. CVE-2022-36901 Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted

   Published 2022-07-27

   Medium·CVSS 6.5 EPSS 0.86%

   Jenkins HTTP Request Plugin 1.15 and earlier stores HTTP Request passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.