Credentials Binding (Jenkins) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 54 known versions, newest CVE from 2026-05-27. Vendor: Jenkins.

CVEs of Credentials Binding

• CVE-2026-48922 - CVSS 7.5 (high), 2026-05-27: Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers…
• CVE-2026-42520 - CVSS 7.5 (high), 2026-04-29: Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to…
• CVE-2025-53650 - CVSS 7.3 (high), 2025-07-09: Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error…
• CVE-2022-20616 - CVSS 4.3 (medium), 2022-01-12: Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with…
• CVE-2020-2182 - CVSS 4.3 (medium), 2020-05-06: Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumstances.
• CVE-2020-2181 - CVSS 6.5 (medium), 2020-05-06: Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no build…
• CVE-2019-1010241 - CVSS 6.5 (medium), 2019-07-19: Jenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated users can…
• CVE-2018-1000057 - CVSS 4.3 (medium), 2018-02-09: Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs. Jenkins however transforms provided…