Jenkins Code Dx Plugin (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-05-16. Vendor: Jenkins.

CVEs of Jenkins Code Dx Plugin

• CVE-2023-2631 - CVSS 4.3 (medium), 2023-05-16: A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL.
• CVE-2023-2195 - CVSS 4.3 (medium), 2023-05-16: A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL.
• CVE-2023-2632 - CVSS 4.3 (medium), 2023-05-16: Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed…
• CVE-2023-2633 - CVSS 4.3 (medium), 2023-05-16: Jenkins Code Dx Plugin 3.1.0 and earlier does not mask Code Dx server API keys displayed on the configuration form, increasing the potential for attackers to…
• CVE-2023-2196 - CVSS 4.3 (medium), 2023-05-16: A missing permission check in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers with Item/Read permission to check for the existence of an…